7 How to install and configure WSUS in Windows server 2019

Рет қаралды 169,046

4 жыл бұрын

Video Series on Advance Networking with Windows Server 2019:
In this video you will see how to install and configure WSUS Server role in Windows Server 2019. This video guide also includes steps to Configure Group Policy to deploy windows updates using WSUS server 2019.
1: Install WSUS (Windows Server Update Service) on Server 2019.
2: Configure Group Policy to deploy updates using local wsus server.
3: Configure WSUS using WSUS configuration Wizard.
4: Approve updates from WSUS server to install updates on computers.
Technet guide on Install and Configure WSUS:
docs.microsoft.com/en-us/wind...
Follow my blogs:
msftwebcast.com/2019/12/insta...

Пікірлер: 125

@mateuszczuba9684 Жыл бұрын

Helped me a ton for a school assignment, thanks a lot!

@rubanpapourave9061 11 ай бұрын

Great video! Thanks for your service to the community 👏

@klantic2 3 жыл бұрын

A great tutorial. I appreciate your time and effort!

@MSFTWebCast Жыл бұрын

Thank You.

@hom1347 3 жыл бұрын

Thank you very much for helping configure my WSUS. Your explanations was very clear !

@MSFTWebCast 3 жыл бұрын

Glad it helped!

@LeonardoPitta1980 3 жыл бұрын

Dude, your videos are soooo great! It's helped me a lot, to install a complete W2019 server in my work. I would like to leave a suggestion: How to prepare and customize a default Windows 10 user profile and deploy it. Thanks you sooo much and greetings from Brazil!

@raulmorales3742 2 жыл бұрын

Thank You very much, your videos are good reference material!! greetins from CUBA.

@saifvasta9787 9 ай бұрын

Thanks it's also working in Oct 2023

@NoNameSNX 4 жыл бұрын

Thank you! your video's helps me a lot!

@OrkhanMammadoff 2 жыл бұрын

Thank you , strainght to the point .

@binitabasnetkhanal7206 Жыл бұрын

Very well explained! helped me a lot! thank you.

@aamirabdulwahiddarweesh2444 4 жыл бұрын

Thanks, very helpful Video, God Bless you ...

@richardorosco807 10 ай бұрын

thank you so much, my friend. Greetings from caracas venezuela.

@AthrunTalan 2 жыл бұрын

Really good tutorial, thank you for taking the time to record this.

@MSFTWebCast 2 жыл бұрын

Glad it was helpful!

@rayrodriguez4472 4 жыл бұрын

You rock! Good job thank you!

@Dh3manis 3 жыл бұрын

Solid video, thanks for the tutorial.

@dominikpezda9636 4 жыл бұрын

Nice film

@fatherfigure2766 3 жыл бұрын

Hello MSFT Webcast I always watch your but never really left a message. You are amazing and your videos do help many people. Keep up the good work God Bless

@MSFTWebCast 3 жыл бұрын

Wow, thank you. Really appreciate the message. Surely videos will keep coming.

@keithsa41 3 жыл бұрын

This is a beautiful demonstration. Thanks for sharing :-)

@ericanderson2376 3 жыл бұрын

@Conner Izaiah scam lol

@sarvadanandgupta7286 4 жыл бұрын

Great work

@user-tq1ko3gs5f 3 жыл бұрын

Thank you! Good work!

@MSFTWebCast 3 жыл бұрын

Thank you too!

@dineshp5268 2 жыл бұрын

Nice explanation

@CarlosRivas-ec9ks 2 жыл бұрын

thanks my friend, i appreciate your information and help!

@MSFTWebCast 2 жыл бұрын

Glad to help!

@syedhussain322 3 жыл бұрын

Excellent Video, very well explained keep the good work up

@MSFTWebCast 3 жыл бұрын

Thanks a lot!

@leungyeetaiful 2 жыл бұрын

Good Video. Very clear and helpful

@MSFTWebCast 2 жыл бұрын

Glad you liked it

@besmellahhussaini4377 Жыл бұрын

here is a tip for getting more views, i think you should name the time for each part your are doing for example your are creating an OU then put the time from 1:00 to 1:40 and when people search on google how to create an OU your video will pop up first. anyways, love your work. thank you

@MSFTWebCast Жыл бұрын

Thank You for the bro tip. Will do the same.

@yespama_world7864 3 жыл бұрын

Thank you

@jonathansavic8890 2 жыл бұрын

Do the weekly choices in the Configure Automatic Updates policy depends on the WSUS, if it's installed or not? Because I've some domains win srvm 2016 where there are not present these options.

@MrProset 3 жыл бұрын

Hello thank you, my class loves you

@MSFTWebCast 3 жыл бұрын

That's awesome! Thank you too..

@yehyamneimne 3 жыл бұрын

beautiful

@MSFTWebCast 3 жыл бұрын

Thank you! 😊

@ahmedsaad-lk2og 2 жыл бұрын

thanks

@jaimyjoy1691 3 жыл бұрын

Great

@bahmanmahmoudzadeh5634 3 жыл бұрын

I had some troubles with your English BUT THANKS FOR YOUR GREAT TUTORIAL

@MSFTWebCast 3 жыл бұрын

Sorry for the first part and thank you for the second part...

@gnuttz1972 5 ай бұрын

Thanks for the video. Can i please ask why did you manually check updates from the member server? Shouldn't the group policy take care of updating that server?

@lukehightime5403 4 жыл бұрын

Hi, thanks for the video. I need your help. In my production environment I want to use wsus server only for my servers (40 servers) . 1. How do you think I should group the servers on wsus? I was thinking of grouping by OS.. CRITICAL SERVERS, server 2012, server 2016, server 2019.. Or is there a better way you would revommend? 2. I will create the OU in AD according to the groups listed above and use client side targeting. How would you recommend auto updates to be configured? I was thinking download but let me choose to install for the critical servers, but what about the other groups? If you could tell me the way you do it in your production environment that will be great. Thank you

@MrSayfch 3 жыл бұрын

I think you should create an OU for each OS to approve updates easily

@luanjorge1529 Жыл бұрын

What updates must I choose (only valid updates)?

@GuruChaz 2 жыл бұрын

Is setting Automatic Update to 1 hour wise considering that Microsoft has put out updates in the past that have broken Windows and Windows Server? Shouldn't there be at least a 48 or 72 hour period between auto updates in case the news the next day warns of a broken Microsoft patch?

@mariambarry85 3 жыл бұрын

Hello, thank you for the video. It was great and well explained. I just have some questions. How come you did not install the WSUS on the domain controller? If you were asked to install a WSUS for a company, on which server (DC or member) would you install it? And why that specific server?

@MSFTWebCast 3 жыл бұрын

You can install it on Domain Controller but it's not ideal according to Microsoft. In Small environment you can go with it. For more information you can read this MS Article: social.technet.microsoft.com/wiki/contents/articles/4236.guidance-about-wsus-on-a-domain-controller.aspx

@henkpeters9734 2 жыл бұрын

Generally, its better to install a new (virtual) server for each role. I have seen environments were WSUS + DC + DHCP and even a file server go together. So if you need to update that server or need to migrate. Now you need to take care of ALL those things pretty much at the same time. Its a rookie sysadmin mistake.

@vishaltirole3369 3 жыл бұрын

Good video

@MSFTWebCast 3 жыл бұрын

Thanks for the visit.

@marekk7151 Жыл бұрын

Today I have approved from wsus November updates to be installed but as i can see those updates were automaticly installed 22.11.2022 - so my WSUS is not controlling updates in my organization >? How i can chect it and make a correction ?

@paolamonserratcovarrubiasv7590 7 ай бұрын

Hey, in which network configuration are your servers working in?

@oji-726 3 жыл бұрын

What could be the reason that your computer didn't show up under "Computers"? Since you can't manually use wuauclt /detectnow on every single computer on a production environment, it would be helpful to know. Is it because it takes a while to detect the devices?

@MSFTWebCast 3 жыл бұрын

Deploy the startup script to run wuauclt /detectnow and wuauclt /reportnow to computers using group policy.

@hv3300 3 жыл бұрын

Excellent video. In real world would you recommend to install WSUS on member server and database on another SQL server?

@MSFTWebCast 3 жыл бұрын

Yes, if you have large network. It will be recommended to use SQL to store updates. This kind of setup work well for small size environment.

@JavierArellano 3 жыл бұрын

I do have one question: let's assume in a computer group ( group inside WSUS) there are 2 different type of OS i.e. server 2016 and 2019. Then you have a KB#123. But actually there are 2 types of Kb with same name one for 2016 and other for 2019. If I approve the one for 2016 will be deployed even in the other server ( 2019 in this example) or then os is smart enough to prevent from update an update that is not for that Target OS?

@MSFTWebCast 3 жыл бұрын

It is best practice to create computer group of same operating system. If you have different OS then it will be more difficult to apply updates from WSUS. If update is not applicable then definitely OS will skip the update. In short OS is sometime behave smartly.

@pardeep0402 2 жыл бұрын

Sir I have 10 clients in my domain with win 10 OS and I want to update win patches and antivirus patches update trough server2019 but offline because we have not authorised to use internet my dc is 2019 server can I configured wsus in same machine or different machine In past we download the antivirus patches from different machine then update the client machine one by one

@chuckcorvec7765 Жыл бұрын

Awesome tutorial. SO much easier than the MS Documentation. I have one issue. Can not seem to get my computers to show up Any suggestions

@MSFTWebCast Жыл бұрын

Sometime computers will take little time in production environment. You can use batch file with wuauclt /detectnow and wuauclt /reportnow command using group policy.

@Nimitz_oceo 2 жыл бұрын

Hi there, thank you very much for the great video. I wanted to know if it is possible for the update to automatically download and install on the member server. I noticed that you had to go to the member server and refresh in order to install. Is there a way to automate that process. Because it will be difficult to do if you have 15 server and have to log into everyone of them

@MSFTWebCast 2 жыл бұрын

WSUS updates will be automatically installed on clients or server based on the group policy settings which you have configured in the GPO for WSUS. I have manually checked and installed the update to demonstrate that it is working.

@zubair5244 Жыл бұрын

@@MSFTWebCast great sir should we used option 4 for automate the download and install update? actually in a lab of 200 pcs its so much time consuming to go on each pc and click on update

@MSFTWebCast Жыл бұрын

@@zubair5244 You can do that. Keep in mind that you also need to specify the schedule for that. If no schedule is specified, the default schedule for all installations will be every day at 3:00 AM.

@malappasg7800 2 жыл бұрын

Shared Good information Sir if have PDF document this one?

@TechGeek254 3 жыл бұрын

Thanks, subscribing for more

@MSFTWebCast 3 жыл бұрын

Thanks for the sub!

@jobinjgrk 7 ай бұрын

Can you provide cleanup procedure for WSUS Server 2022. I have assign 300 GB for WSUS download Destination drive, but it is full with in 2 days.

@azrael9561 3 жыл бұрын

I have chosen to try to deploy updates to Windows 10 Pro N, but for some reason it does find any updates for it. I have only selected windows 10 for products. The firewall is not the issue. Do I need to select a different product? I have even tried updating my server. The windows 10 machine also has never been updated.

@MSFTWebCast 3 жыл бұрын

Might be update is not needed by the windows 10 client. Make sure that that you will select proper product to get the list of updates. You can also check from the KB number of the update for the more information.

@azrael9561 3 жыл бұрын

@@MSFTWebCast Thanks a lot for the help, but what client would Pro N be? I only selected the flat windows 10. Most likely it is was updated already though when I started my VM

@ainsalleh 3 жыл бұрын

does this tutorial includes configuration for downstream to receive updates?

@MSFTWebCast 3 жыл бұрын

Partially. You can see those options with explanation but this is not the configuration for downstream WSUS server.

@zypon1989 Жыл бұрын

i have a question, why is it that my configured wsus will have an error everytime i choose Approval: unapproved status : any (the error is " reset server node)???

@MSFTWebCast Жыл бұрын

1. Reduce the number of approved updates or 2. Increase WSUSPool's private memory limit and decrease regular time interval. For that search for: how to fix WSUSPool in IIS stops repeatedly.

@shriramwasule7626 4 ай бұрын

to use wsus do we need to join our client instances to domain?

@MSFTWebCast 4 ай бұрын

You can setup windows update group policy on workgroup server or client and then specify the path to your local wsus server to get windows updates.

@mannu509 Жыл бұрын

Hi, Nice demo, Is that the Windows client pc or server...one we have server 2019 and another we have client pc right?

@MSFTWebCast Жыл бұрын

I have used dedicated member server for WSUS. One Domain Controller, One Member Server and for testing one More Server VM.

@mannu509 Жыл бұрын

@@MSFTWebCast so it means u have used 3 servers . one WSUS and 2nd Domain Controller and 3rd member server.

@MSFTWebCast Жыл бұрын

@@mannu509 Yes. But instead of using Server VM, you can use client VM.

@ainsalleh 3 жыл бұрын

Hi i was synchronizing like in 14:19 but then my network down and the first synchronization succeded but the next sync failed. can i still proceed with the next steps?

@MSFTWebCast 3 жыл бұрын

You can find those option in WSUS management console and click on "Options".

@user-oy1ln7sz7d 8 күн бұрын

i have download stuck on 0% on clients, but they see updates and they are downloaded on wsus from ms

@prabu5113 Жыл бұрын

How they will do in production environment for 1000 servers

@pavan8701 2 жыл бұрын

while trying to configure wsus, i am getting a message like An Http error occured.. Please help me

@zubair5244 Жыл бұрын

sir, I have 4 labs and total 200 pcs is there any way to add all 200 pcs at once into wsus computer section ? or i need to run command one by one on all 200 pcs please reply

@MSFTWebCast Жыл бұрын

Those computer will report automatically to WSUS server, in video I need to show you the result quickly so I had to do to that. If computer does not report to WSUS and dont appear in WSUS console, you can use .bat file script to force them.

@zubair5244 Жыл бұрын

@@MSFTWebCast sir in my vm environment pc was not added after 5 or 6th attempt i also tried after restart but on the next day after restarting vm it got added thats why i am a little confused in detection for 200 pcs

@MSFTWebCast Жыл бұрын

@@zubair5244 It will be added automatically. Sometime it will take day or two but will be added for sure.

@pdvprasad4405 Жыл бұрын

I am not able to connect my client computers, even I have applied the group policy settings. it is showing the error like " your WSUS server currently shows that no computers are registered to receive updates". Please help me to solve the issue. Thanks in advance.

@MSFTWebCast Жыл бұрын

Clients will take some time to report to WSUS server. You can force then by using command wuauclt /reportnow and wuauclt /detectnow commands. You can create a .bat file and run it on client computers.

@pardeep0402 2 жыл бұрын

Can we configured offline

@aryanszubair Жыл бұрын

i have configured the WSUS but when i am starting from tools it is sayin local server not able to start .i.e locally hosted server requires additional information i choose default directory i.e D:\wsus-store but is gets an error unable to complete post deployment

@MSFTWebCast Жыл бұрын

You will find logs about the errors in Server manager. Go to IIS section in server manager and check for logs related path information. You can also check the status of WSUS related services like IIS, BITS etc. Try to restart them.

@aryanszubair Жыл бұрын

@@MSFTWebCast I am not able to see any site added in the sites list .only default site is there

@MSFTWebCast Жыл бұрын

Is WSUS service just installed? I mean did you completed post-installation? If you have just installed then remove the WSUS server role and re-install again. During service removal it will ask for restart, so planned accordingly.

@Macauley7272 2 жыл бұрын

Hi everyone, Just wanted to say if you get an error on server 2012r2 saying 'a HTTP error occurred' update the server as that worked for me and many other people

@krishnavijayan6844 8 ай бұрын

hello i got the same error can u please tell me what to do here as i am using windows server 2019

@nekramverma7586 Жыл бұрын

i followed all these steps but when you are using sample that you have imported the program just bugs up.

@MSFTWebCast Жыл бұрын

Can you tell me the time stamp which you are referring?

@aniltegeti 6 ай бұрын

Here ur using 2 member servers...we r confused. U said we r using only one member server that is SRO1...and ur installing wsus services into another member server I.e ..wsus

@clintondesmond6287 Жыл бұрын

Can i install wsus on my domain controller?

@MSFTWebCast Жыл бұрын

Yes, you can but it is not recommended. It is little bit risky if WSUS crash it may affect the AD services and performance issue will be also there. If you have small network then you can go with it.

@ouiammakboul8917 7 ай бұрын

how did you connect the server to internet

@MSFTWebCast 7 ай бұрын

Since this is a test lab created in oracle virtualbox, the VM are directly connect to my local router. All the VMs are configured with bridge adapter type.