Quick AU Client Detection & Installation with Windows Server Updates Services, WSUS

Most of you want security updates / patches to be installed quickly. This is one of the approaches to Force Automatic Security Updates installation / Quick WUA Client detection & installation. It involves both server & client configuration.


Server Configuration:


1. Automatic Detection Frequency: For Quick AU Client detection, you can set the value of “Automatic Detection Frequency” to lesser value based on WSUS Server hardware configuration + number of clients in the network. It actually Specifies the hours that WUA will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the hours specified here minus zero to twenty percent of the hours specified. For example, if this policy is used to specify a 20 hour detection frequency, then all clients to which this policy is applied will check for updates anywhere between 16 and 20 hours.


There is a known issue if the detection cycle if it is set to very low say every 1-3 hours. For more information see Reporter failed to upload events with hr = 80244008.


2. Set the deadline for a known missing update to a date in the past which will force the install as the deadline is already completed & the patch has to install immediately.


Client Configuration:


3. Last but not the least, Run this command to force the client detection, “wuauclt /detectnow”.

Windows Server Update Services Client / Server Requirements aka Check-List

WSUS Requirements
The following lists the software requirements for WSUS servers and client computers.


WSUS Servers
• Windows 2000 Server with Service Pack 3 (SP3) or Windows Server 2003 Standard Edition, Enterprise Edition, Datacenter Edition, or Web Edition.
• Microsoft Internet Information Services (IIS) 5.0.
• Microsoft Internet Explorer 6.0.
• Background Intelligent Transfer Service (BITS)2.0;http://go.microsoft.com/fwlink/?LinkId=46794.
• Microsoft Internet Explorer 6.0 Service Pack 1;
http://go.microsoft.com/fwlink/?LinkId=47359.
• Microsoft .NET Framework 1.1 Service Pack 1;
http://go.microsoft.com/fwlink/?LinkId=47368.
• Both the system partition and the partition on which you install WSUS must be formatted with the NTFS file system.
• A minimum of 1 GB free space is required for the system partition.
• A minimum of 6 GB free space is required for the volume where WSUS stores content; 30 GB is recommended.
• On Windows 2000, install Microsoft SQL Server 2000 Desktop Engine (MSDE) prior to running WSUS Setup & install a security patch,
http://go.microsoft.com/fwlink/?LinkId=47363 to MSDE to protect your WSUS server.


WSUS Clients
• A minimum of Microsoft Windows 2000 Professional with Service Pack 3 (SP3), Microsoft Windows XP Professional, with or without Service Pack 1 or Service Pack 2.


And, get started!

WSUS Database Requirements

Here you will find WSUS Database Requirements for Windows 2000 & Windows 2003 Servers;


On Windows 2000: Install Microsoft SQL Server 2000 Desktop Engine (MSDE) prior to running WSUS Setup & install a security patch, http://go.microsoft.com/fwlink/?LinkId=47363 to MSDE to protect your WSUS server.


For Windows 2003: Although database software is required to install WSUS, it is not listed here because the default WSUS installation on Windows Server 2003 includes Windows SQL Server™ 2000 Desktop Engine (WMSDE) database software.


More on http://wsuswiki/WSUSDB

Automatic Update Client Versions History

Automatic Update Client Version 5.4 is compatible with SUS, WindowsUpdate v4, WindowsUpdate v5. This version of AU Client is normally installed in Windows XP SP1, Windows Server 2000 SP# 3 and Windows Server 2003 systems.


Automatic Update Client Version 5.7 was introduced by WUS beta client. This client talks to SUS and the WUS beta.


Automatic Update Client Version 5.8 was introduced by WSUS RC client. This client talks to WSUS & SUS. WSUS RTM uses the same client.




  • WSUS 2.0 SP1 – required version = 5.8.0.2607


  • WSUS 2.0 RTM – required version = 5.8.0.2469

Hope this gave an idea of Automatic Update Client Versions History.


Download WindowsUpdateAgent20-x86.exe
http://go.microsoft.com/fwlink/?LinkId=43264

NEW – Windows Server Update Services mailing list on patchmanagement.org

NEW – Windows Server Update Services mailing list on http://patchmanagement.org.


This is the place to ask questions and share comments about Microsoft’s WSUS server. To subscribe, send a blank email to subscribe-wsus@patchmanagement.org. Check out WSUS Mailing List Frequently Asked Questions on http://www.patchmanagement.org/wsusfaqs.asp


Here are couple of WSUS News Groups where you can post issues related to WSUS & SUS. I will be moderating these forums.







  1. http://www.faqshop.com/forums/viewforum.php?f=4

WSUS On the move: New name brings a new domain.

So, finally WSUS is RTM’d (see here)


http://susserver.com is now moved to a new domain http://wsus.info/


The official site http://microsoft.com/WSUS is not updated yet. Here are couple of WSUS News Groups where you can post issues related to WSUS & SUS. I will be moderating these forums.





  1. http://www.faqshop.com/forums/viewforum.php?f=4

For all the stuff related to WSUS, check out WIKI site on http://wsuswiki.com


Stay tuned. Lot’s of excitement to follow.

Long awaited Windows Server Update Services is finally Released To Manufacturing

Long awaited Windows Server Update Services aka WSUS is finally released to manufacturing. This was announced at TechEd Orlando by Microsoft CEO, Steve Ballmer.


Gordon Mangione, Corporate Vice President, Security Business & Technology Unit said, “Specifically, today we announced the availability of Windows Server Update Services (WSUS) and Microsoft Update (MU). WSUS is an update management component of Windows Server 2003 that enables IT administrators to more easily assess, control and automate the deployment of Microsoft software updates. WSUS gives customers the ability to better secure Windows environments and minimize downtime. MU is the next generation of the popular Windows Update (WU) service. It gives customers everything they get through WU plus high priority updates for Office and other Microsoft applications. It’s a one-stop destination for updates that help keep computers more secure, up-to-date, and performing at their best. MU includes the Automatic Updates functionality already found in WU so users can choose to automatically install high-priority updates.“


More on;


http://www.microsoft.com/presspass/features/2005/jun05/06-06UpdateManagement.mspx


http://www.wsuswiki.com/WSUSProjectStatus


Microsoft enterprise security patch-management platform ships


See WSUS Guides on Microsoft Download