UMD ITSS: ITSS SUS Server

ITSS Home : Virus and Security Info : SUS: Automating Windows Updates

Automating Microsoft Windows Updates via WSUS

If you are responsible for a computer that is connected to the University's network, you must update your system as soon as critical security updates are available.

To safeguard the integrity of University of Minnesota Duluth computers, networks, data and their availability for appropriate educational and business activities, ITSS is offering a new, automated Windows Software Update Service (also known as WSUS) that will help many Microsoft Windows users receive their updates in a safe and timely manner.

Windows Software Update Service (WSUS) differs from the old SUS service. WSUS not only distributes Windows critical updates and service packs, but it also distributes MS Office, Windows Defender, and several others MS products which the old SUS technology did not have.

Not sure if you currently have WSUS installed?

If you received your updates from the old SUS server, then there is nothing extra you have to do. You will automically receive updates from the new WSUS server.

If you are unsure, here is a simple file called DoIHaveSUS.vbs that will tell you if you have SUS properly installed.

If installed, you should see the following message box:

Who should use this Windows Software Update Service?

The primary audience for this new service is those who use the personal computers and workstations listed below which connect directly to UMD's network. Since Microsoft's update sites frequently become very busy when critical updates are released, this service will make installing updates quicker and easier than before. Wireless, modem users, and other off-campus connections who are usually connected for less than 30 minutes may not benefit from using this service; see the "Update Schedule" section below.

Personal computers and workstations:
Windows 2000 Professional SP-4; Windows XP Professional.

To take advantage of this service, most people can simply import and save the registry file ITSS has made available:

ITSS-WSUS-A. - This file will load your Windows Updates at 12PM daily.

ITSS-WSUS-B. - This file will load your Windows Updates at 4PM daily.

You may select either version A or B depending on your preferred work schedule.

Obtaining and installing ITSS WSUS

If you have not used Microsoft's "Windows Update" recently, we recommend you that do so before installing the ITSS-WSUS registry file. Using Microsoft's update will ensure that you have the latest service pack that makes this kind of update service possible.

Downloading and installing ITSS-WSUS is quick and easy.

Right-click either the A or B link above and select "Save Link Target As" or "Save Target As." (The file name you see, ITSS-SUS-A or ITSS-WSUS-A.reg, depends on whether or not your system is set up to show file name extensions, the .reg portion of the name.)
Locate the ITSS-WSUS-A file. (If you are typical, the file will be saved in your "My Documents" folder.) Double-click on the ITSS-WSUS-A file to install it.
Once you have begun the installation process, the Registry Editor will ask a question similar to this:
"Do you want to add the information in C:\DOCUME~1\YOURNAME\MYDOC\ITSS-WSUS-A to the Registry?" To install the software you must select "Yes."

That's it. The settings are now part of your system.

Update schedule

Once your system is set up to use this service, you will be alerted whenever a critical update is about to be installed on your system. Updates are scheduled for 12 PM with version A or 4 PM with Version B. If you are not logged in at the time, the update will be applied 30 minutes after your system is started.

Restarting your computer

Some updates do not require a system restart, others do. If an update requires that you must restart your system, you will be prompted to do this. In these cases the update will not take effect until you restart your system. Before restarting your system, save your work and close any open applications.

To stop using ITSS's WSUS
Remember: if you remove this configuration, you must use "Windows Update" to keep your computer secure. To stop using this service, remove the registry key by following these steps:

Select "Run" from the Start menu.
At the command prompt, as shown in the sample "Run" figure below,

type this long registry delete command:
reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

and click the OK button when you are done

The system will respond with a message similar to this:
"Permanently delete the registry key SOFTWARE\Policies\Microsoft\Windows\WindowUpdate (Y\N)?"
To delete ITSS-SUS you must respond with a Yes.

Or install the Remove-ITSS-WSUS.reg file.

FAQ
See the ITSS SUS FAQ for more information about this service.