How to Install and Configure WSUS on Windows Server 2019
What is WSUS?
Windows Server Update Services (WSUS) is an update management tool that distributes updates and releases from Microsoft Update. By using WSUS, administrators can manage updates centrally, providing an overview of update compliance across the network. WSUS allows administrators to install the latest Microsoft product updates efficiently, keeping client and server computers updated.
Step-by-Step Installation of WSUS on Windows Server 2019
1. Log Into the Server
- Log on to the Windows Server 2019 where WSUS will be installed.
- Ensure the server is a member of the Local Administrators group.
2. Open Server Manager
- Open Server Manager, click on "Manage," and then select "Add Roles and Features."
- Click "Next" to proceed.
3. Select Installation Type
- On the "Select Installation Type" page, choose "Role-Based or Feature-Based Installation" and click "Next."
4. Choose Server
- On the "Server Selection" page, verify the server’s name and click "Next."
5. Select WSUS Role
- On the "Select Server Roles" page, select "Windows Server Update Services."
- Click on "Add Features" and then click "Next."
6. Leave Default Features
- On the "Select Features" page, leave all options to default and click "Next."
7. Specify Update Storage Location
- Select the WID Connectivity and WSUS Services on the "Select Role Services" page and click "Next."
- Specify a location to store updates and click "Next."
8. Install Web Server Role (IIS)
- The roles for the Web Server (IIS) are set automatically, so click "Next."
9. Install WSUS
- Click "Install" to begin the WSUS installation.
- Once completed, click on "Launch Post-Installation Tasks" and wait for the configuration to complete.
- Click "Close" to finish the installation.
Configuring WSUS on Windows Server 2019
1. Open Configuration Wizard
- Open WSUS Console, click on "Options," and then click on "WSUS Server Configuration Wizard."
- Click "Next" on the initial setup pages.
2. Choose Upstream Server
- Choose between "Synchronize from Microsoft Update" or "Synchronize from Another Windows Server" and click "Next."
- For this guide, select "Synchronize from Microsoft Update."
3. Configure Proxy Server (if applicable)
- Enter proxy server details if required and click "Next."
4. Connect to Upstream Server
- Click "Start Connecting" on the "Connect to Upstream Server" page, then click "Next" after the connection is established.
5. Choose Update Languages
- Select the languages for the updates and click "Next."
6. Choose Products and Classifications
- Choose the products and classifications for updates, then click "Next."
7. Set Sync Schedule
- Choose between manual or automatic synchronization and click "Next."
- For automatic, set the synchronization interval.
8. Begin Initial Synchronization
- Check the "Begin Initial Synchronization" checkbox and click "Next."
- Click "Finish" to complete the configuration.
Configure Group Policy Settings for WSUS
1. Open Group Policy Management
- Open the Group Policy Management console and create or edit a GPO.
2. Configure Automatic Updates
- Navigate to Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Windows Update.
- Double-click on "Configure Automatic Updates," enable it, and set the schedule.
3. Set Intranet Update Service Location
- Enable the policy for specifying the update service and statistics server.
- Apply the settings and save changes.
By following these steps, you can successfully install and configure WSUS on Windows Server 2019, ensuring efficient update management across your network.