Windows Server Update Services
Encyclopedia
Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program
developed by Microsoft Corporation that enables administrators to manage the distribution of update
s and hotfix
es released for Microsoft products to computers in a corporate environment. WSUS downloads these updates from Microsoft Update website and then distributes them to computers on a network. WSUS runs on Windows Server
and is free to licensed Microsoft customers.
operating system and downloaded updates for the specified versions of Windows from the remote Windows Update
site, operated by Microsoft. The clients could then download updates from this internal server, rather than connecting directly to Windows Update. Support for SUS by Microsoft was originally planned to end on December 6, 2006, but based on user feedback, the date was extended to July 10, 2007.
WSUS builds on SUS by expanding the range of software it can update.The WSUS infrastructure allows automatic downloads of updates, hotfixes, service pack
s, device driver
s and feature packs to clients in an organization from a central server(s). This saves bandwidth
, time and disk space, as the individual computers in a network do not have to connect to an external server themselves, but connect to a local central server. It also increases administrators' control and allows clients to obtain updates in environments that do not have internet access.
of update packages from Microsoft. It allows administrators to approve or decline updates before release, to force updates to install by a given date, and to obtain extensive reports on what updates each machine requires. System administrators can also configure WSUS to approve certain classes of updates automatically (critical updates, security updates, service packs, drivers, etc.). One can also approve updates for "detection" only, allowing an administrator to see what machines will require a given update without also installing that update.
Administrators can use WSUS with Group Policy
for client-side configuration of the Automatic Updates client, ensuring that end-users can't disable or circumvent corporate update policies. WSUS does not require the use of Active Directory
; client configuration can also be applied by local group policy or by modifying the Windows registry
.
WSUS uses .NET Framework
, Microsoft Management Console
and Internet Information Services
. WSUS 3.0 uses either SQL Server Express
or Windows Internal Database
as its database engine. WSUS 2.0 used MSDE
. System Center Configuration Manager (SCCM) interoperates with WSUS, and is able import third party security updates into the product.
Computer program
A computer program is a sequence of instructions written to perform a specified task with a computer. A computer requires programs to function, typically executing the program's instructions in a central processor. The program has an executable form that the computer can use directly to execute...
developed by Microsoft Corporation that enables administrators to manage the distribution of update
Update
Update may refer to:* Patch , also known as a software update* Update ,a SQL statement for changing database records* Update , 2007* Update , 1987* Updated , M...
s and hotfix
Hotfix
A hotfix was originally the term applied to software patches that were applied to live i.e. still running systems. Similar use of the terms can be seen in hot swappable disk drives...
es released for Microsoft products to computers in a corporate environment. WSUS downloads these updates from Microsoft Update website and then distributes them to computers on a network. WSUS runs on Windows Server
Windows Server
Windows Server is a brand name for a group of server operating systems released by Microsoft Corporation. All are part of Microsoft Servers.- Members :This brand includes the following software:* Windows 2000 Server* Windows Server 2003...
and is free to licensed Microsoft customers.
History
The first version of WSUS was known as Software Update Services (SUS). It only delivered hotfixes and patches for Microsoft operating systems. SUS ran on a Windows ServerWindows Server
Windows Server is a brand name for a group of server operating systems released by Microsoft Corporation. All are part of Microsoft Servers.- Members :This brand includes the following software:* Windows 2000 Server* Windows Server 2003...
operating system and downloaded updates for the specified versions of Windows from the remote Windows Update
Windows Update
Windows Update is a service provided by Microsoft that provides updates for the Microsoft Windows operating system and its installed components, including Internet Explorer...
site, operated by Microsoft. The clients could then download updates from this internal server, rather than connecting directly to Windows Update. Support for SUS by Microsoft was originally planned to end on December 6, 2006, but based on user feedback, the date was extended to July 10, 2007.
WSUS builds on SUS by expanding the range of software it can update.The WSUS infrastructure allows automatic downloads of updates, hotfixes, service pack
Service pack
A service pack is a collection of updates, fixes or enhancements to a software program delivered in the form of a single installable package. Many companies, such as Microsoft or Autodesk, typically release a service pack when the number of individual patches to a given program reaches a certain ...
s, device driver
Device driver
In computing, a device driver or software driver is a computer program allowing higher-level computer programs to interact with a hardware device....
s and feature packs to clients in an organization from a central server(s). This saves bandwidth
Bandwidth (computing)
In computer networking and computer science, bandwidth, network bandwidth, data bandwidth, or digital bandwidth is a measure of available or consumed data communication resources expressed in bits/second or multiples of it .Note that in textbooks on wireless communications, modem data transmission,...
, time and disk space, as the individual computers in a network do not have to connect to an external server themselves, but connect to a local central server. It also increases administrators' control and allows clients to obtain updates in environments that do not have internet access.
Operation
Windows Server Update Services 2.0 and above comprise a repositorySoftware repository
A software repository is a storage location from which software packages may be retrieved and installed on a computer.- Discussion :Many software publishers and other organizations maintain servers on the Internet for this purpose, either free of charge or for a subscription fee...
of update packages from Microsoft. It allows administrators to approve or decline updates before release, to force updates to install by a given date, and to obtain extensive reports on what updates each machine requires. System administrators can also configure WSUS to approve certain classes of updates automatically (critical updates, security updates, service packs, drivers, etc.). One can also approve updates for "detection" only, allowing an administrator to see what machines will require a given update without also installing that update.
Administrators can use WSUS with Group Policy
Group Policy
Group Policy is a feature of the Microsoft Windows NT family of operating systems. Group Policy is a set of rules that control the working environment of user accounts and computer accounts. Group Policy provides the centralized management and configuration of operating systems, applications, and...
for client-side configuration of the Automatic Updates client, ensuring that end-users can't disable or circumvent corporate update policies. WSUS does not require the use of Active Directory
Active Directory
Active Directory is a directory service created by Microsoft for Windows domain networks. It is included in most Windows Server operating systems. Server computers on which Active Directory is running are called domain controllers....
; client configuration can also be applied by local group policy or by modifying the Windows registry
Windows registry
The Windows Registry is a hierarchical database that stores configuration settings and options on Microsoft Windows operating systems. It contains settings for low-level operating system components as well as the applications running on the platform: the kernel, device drivers, services, SAM, user...
.
WSUS uses .NET Framework
.NET Framework
The .NET Framework is a software framework that runs primarily on Microsoft Windows. It includes a large library and supports several programming languages which allows language interoperability...
, Microsoft Management Console
Microsoft Management Console
Microsoft Management Console is a component of Windows 2000 and its successors that provides system administrators and advanced users an interface for configuring and monitoring the system.- Snap-ins and consoles :...
and Internet Information Services
Internet Information Services
Internet Information Services – formerly called Internet Information Server – is a web server application and set of feature extension modules created by Microsoft for use with Microsoft Windows. It is the most used web server after Apache HTTP Server. IIS 7.5 supports HTTP, HTTPS,...
. WSUS 3.0 uses either SQL Server Express
SQL Server Express
Microsoft SQL Server Express, a freely downloadable and distributable version of Microsoft's SQL Server relational database management system, comprises a database specifically targeted for embedded and smaller-scale applications.- Capabilities :...
or Windows Internal Database
Windows Internal Database
Windows Internal Database is a variant of SQL Server Express 2005 that is included with Windows Server 2008 and Windows Server 2008 R2, and is included with other free Microsoft products released after 2007 that require an SQL Server database backend...
as its database engine. WSUS 2.0 used MSDE
MSDE
Microsoft SQL Server Data Engine is a relational database management system developed by Microsoft. It is a scaled-down version of Microsoft SQL Server 7.0 or 2000 which is free for non-commercial use as well as certain limited commercial use...
. System Center Configuration Manager (SCCM) interoperates with WSUS, and is able import third party security updates into the product.
Version history
| Version | Date | Comments |
|---|---|---|
| 2.0 Release Candidate | March 22, 2005 | |
| 2.0 RTW | June 6, 2005 | |
| 2.0 Service Pack 1 | May 31, 2006 | Adds support for Windows Vista Windows Vista Windows Vista is an operating system released in several variations developed by Microsoft for use on personal computers, including home and business desktops, laptops, tablet PCs, and media center PCs... clients, additional client languages, and using Microsoft SQL Server Microsoft SQL Server Microsoft SQL Server is a relational database server, developed by Microsoft: It is a software product whose primary function is to store and retrieve data as requested by other software applications, be it those on the same computer or those running on another computer across a network... 2005 as a database backend, as well as performance improvements with the web-based user interface |
| 3.0 beta 2 | August 14, 2006 | MMC Microsoft Management Console Microsoft Management Console is a component of Windows 2000 and its successors that provides system administrators and advanced users an interface for configuring and monitoring the system.- Snap-ins and consoles :... based UI and loads of new features |
| 3.0 Release Candidate | February 12, 2007 | |
| 3.0 RTW | April 30, 2007 | WSUS 3.0 and WSUS Client 3.0 were made available via WSUS on 22 May 2007 |
| 3.0 Service Pack 1 Release Candidate | November 1, 2007 | |
| 3.0 Service Pack 1 RTW | February 7, 2008 | |
| 3.0 Service Pack 2 RTW | August 25, 2009 |
External links
- Deploying Microsoft Windows Server Update Services 2.0
- WSUS Product Team Blog
- WSUS Wiki – contains many detailed documents on WSUS operation, known issues, and troubleshooting
- WSUS.DE - German WSUS-Community (Microsoft CLIP Community)
- WuInstall - Control installation of WSUS updates from command line