How much space does WSUS server must have for the installation and to hold updates?
Show
Chapter 3 - Installing WSUSPublisher SummaryThe chapter explains that Microsoft has made the installation of windows server update services (WSUS) as simple as possible, while still leaving one with a variety of options for configuration. It explains some of the important points to install WSUS. The chapter recommends making sure that the WSUS server meets the minimum requirements, and deciding the location and type of database prior to installation. The chapter recommends saving some time and downloading all the necessary patches at once that will prevent multiple visits to the Microsoft Website. If one is planning to implement a front-end/back-end solution, one should be mindful of typing. A simple typo can have troubleshooting for hours. Cited by (0)Copyright © 2006 Elsevier Inc. All rights reserved. In this 8-part series, we will go over a good strategy on setting up Windows Server Update Services (WSUS) and managing it using test groups approval processing, and more. Sometimes WSUS may also be referred to as Windows Update Server (WUS) or Software Update Point (SUP) and in Microsoft Configuration Manager (ConfigMgr/SCCM), it is known as a Software Distribution Point. We will touch on group policy, using inheritance and scoping permissions to create a highly flexible, yet simple design for any AD architecture. We will also go over what modifications from the default WSUS Console to make your views mean more and give you more visibility into your environment. Finally, we will wrap up with the required maintenance for WSUS and how you can use WSUS Automated Maintenance to help automate what you need to do. You can use the menus on the left to jump to a specific part and navigate the series. Let’s start! Choosing your Server OSServer 2008 & Server 2008 R2
Server 2012 & Server 2012R2
Server 2016
Server 2019
Server 2022
Deploy Updates (Push System) vs Handle Updates (Pull System)WSUS is a repository for updates and associated files. It is not a true deployment tool. The Windows Update Agent (WUA) on each of the client systems is responsible for doing all the work including checking in with the WSUS server and ask if there are any updates that are applicable to them. If there are updates available, the WUA will download them, install them, initiate the restart, communicate back to WSUS and report that the update(s) have been installed. The Windows Update Agent is controlled with policies set through GPO (Most common), Intune, Local Group Policy, or Registry Edits. Microsoft Endpoint Manager Configuration Manager (MECM/SCCM/ConfigMgr) is a true deployment tool with an agent on each system. MECM uses WSUS in the background to populate updates available for MECM to push to clients and install. Because MECM uses WSUS in the background, you must also make sure you’re performing the required maintenance for WSUS, not just doing the maintenance for MECM. Take note of all your client systems but plan for Windows 10 and Windows 11.Whatever client systems you have you should make a mental note of but plan your WSUS around Windows 10 and Windows 11. One thing that is very good that comes out of this is their switch to Windows as a Service (WaaS) where you get free upgrades to the latest revision of Windows 10 and Windows 11 for the life of your device. What does ‘life of your device’ mean?It includes your motherboard. If you have a catastrophic failure and need to replace your motherboard, you’ll have to buy a new license of Windows. If it is covered by warranty, the manufacturer will provide you a new motherboard with a valid license of Windows embedded in the hardware. It includes hardware requirements. For example, if you’re using Windows 10 on a 32bit Generation 1 netbook with 1GB of RAM, you may have realized that there’s an end of life due to minimum requirements going up to 2GB. As we have seen with Windows 11, new hardware requirements were put in place such that if your computer has a 7th Generation Intel processor or AMD equivalent generation, the life of the device is the end of support for Windows 10 which is Oct 14, 2025. If you have a device that had an 8th generation processor, your system would be compatible with upgrading to Windows 11, assuming it meets the other hardware requirements (TPM 2.0, 4GB RAM or more, etc.) and would continue to be supported on Windows 11. WSUS Setup on Server 2012 & HigherThe setup for WSUS on Server 2012 or higher (2012, 2012R2, 2016, 2019, 2022) is the same. First you will need to add the role to the server through Server Manager. You can choose to use the Windows Internal Database (good for small to large deployments) or decide to use a Remote SQL server (Express, Standard or Enterprise) if you are going to run a load balancing or high availability service. Most large organizations should use a distributed model for WSUS with a single master upstream server and multiple replica downstream servers based on location, bandwidth, or operational boundaries. You can install WSUS using PowerShell (ran in elevated mode [Run as administrator]) instead of using Server Manager. This way you can script out the entire process if you’re deploying multiple servers. Install WSUS with WID & UI MMC Console
DO NOT HAVE A TRAILING BACKSLASH [\] on the CONTENT_DIR folder or you will encounter errors. The folder does not have to exist prior to running the command. Also, refrain from using a root drive (D:) as the permissions of root drives are different than what is required for WSUS to run, so you will end up having issues. Instead, use a folder off the root drive (eg. C:\WSUS or D:\WSUS) Windows Internal Database vs SQL Express EditionThe Windows Internal Database (WID) is SQL Express edition, just built into the operating system as a feature, rather than having a separate installation. There is no benefit to installing a SQL Express instance locally on a system instead of using the WID. There is actually a detriment to installing SQL Express instead of using the WID; the SQL Express instance will have a hard limit for space in the database while the WID does not. The trade-off on using the WID is that it can only be accessed from the server itself (only through Named Pipes, and not from a remote server via TCP/IP) Some differences between Windows Internal Database (WID) and SQL Server Express
Run through the WSUS Configuration Wizard to get started.
Now that the WSUS server has been configured and is starting the first sync, check for updates from Microsoft using Microsoft Update on the server and install all updates that it finds, rebooting when necessary and re-checking for updates to make sure you’re fully updated. Note: If you are using Server 2012 or Server 2012 R2, along your update path, you may or may not heard about the dreaded KB3159706. While Microsoft has not officially superseded this update, from the feedback we have seen in the communities, the patches and fixes that this KB comes with has been included with the latest cumulative update for Server 2012 and Server 2012 R2. According to the KB Article, you
now only need to run a single command [ Open the WSUS Console and head to Options. Click on E-Mail Notifications and setup your recipients, with status reports daily, and setup the email server tab with your mail server info. Click OK. For the average install, click on Update files and Languages and make sure that “Download express installation files” is NOT checked. This ‘option’ will eat up space and is a misnomer with the description. It is not a ‘stub vs. full’ download of the update, where a stub installation will require an internet connection and download what’s needed. It is essentially a revision control system for each file. A better description of what it does comes from: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc708456(v=ws.10)#using-express-installation-files
Express Installation files has its place – when you have hundreds of servers to deliver updates to, install and reboot in a short amount of time, express installation files works well as it will only send the deltas to the requesting server. It will, however, require 3-5 times the space on your server. Click OK to close this window.
How much space does a WSUS server need?Local WSUS server storage
at a minimum, WSUS requires 20 GB to store updates locally; however, we recommend 30 GB based on tested variables.
What is the minimum amount of disk space required for installing Windows Server Core?Be aware that 32 GB should be considered an absolute minimum value for successful installation. This minimum should allow you to install Windows Server 2022 using the Server Core installation option, with the Web Services (IIS) server role.
Where are WSUS updates stored?The WSUSContent folder is where WSUS stores information regarding Microsoft software update EULA's, third-party software update content, and Microsoft update content when using WSUS standalone without SCCM.
What are the minimum disk space requirements for a new WSUS 3.0 SP2 installation?Both the system partition and the partition on which you install WSUS 3.0 SP2 must be formatted with the NTFS file system. Minimum 1 GB of free space on the system partition. Minimum 2 GB of free space on the volume on which the database is stored.
|