+ Post New Thread
Results 1 to 6 of 6
Windows Thread, WSUS server advice in Technical; Hi guys, I'm just curious, had some problems with windows updates applying that we dont' want at the moment and ...
  1. #1

    Join Date
    Mar 2007
    Location
    Central Scotland
    Posts
    829
    Thank Post
    12
    Thanked 8 Times in 8 Posts
    Rep Power
    19

    WSUS server advice

    Hi guys,

    I'm just curious, had some problems with windows updates applying that we dont' want at the moment and looking for a way of controlling it.

    We've got 50+ Server 2003 domains scattered across many, many buildings, some with 10Mb connections, others just on 1Mb broadband.

    What I was hoping to do was have a central WSUS server that could control the updates for all sites, is that feasable (at least in theory?)

    The alternative as I see it is to have the local domain server handle WSUS, only problem I see there is having to monitor/manage 50+ servers as the domains are all separate.

  2. #2

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,859
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    182
    Quote Originally Posted by Halfmad View Post
    What I was hoping to do was have a central WSUS server that could control the updates for all sites, is that feasable (at least in theory?)
    That's exactly what WSUS is designed for. It will fetch the appropriate updates from Microsoft, wait for you to approve them, and then distribute them to the machines as you specify. Takes a few hours to fetch the first cache, but you only have to do that once.

    As you have so many sites and domains, I would have strategically placed child servers in your WSUS topology, much as you would have multiple domain controllers, to minimise bandwidth (each caches, so slow links are more efficient).

  3. Thanks to powdarrmonkey from:

    Halfmad (18th September 2008)

  4. #3

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,646
    Thank Post
    1,255
    Thanked 781 Times in 678 Posts
    Rep Power
    236
    Quote Originally Posted by powdarrmonkey View Post
    That's exactly what WSUS is designed for. It will fetch the appropriate updates from Microsoft, wait for you to approve them, and then distribute them to the machines as you specify. Takes a few hours to fetch the first cache, but you only have to do that once.
    Hmm, the WSUS server I've just set up reckons it's going to be a week downloading updates...

    --
    David Hicks

  5. #4

    Join Date
    Mar 2007
    Location
    Central Scotland
    Posts
    829
    Thank Post
    12
    Thanked 8 Times in 8 Posts
    Rep Power
    19
    Quote Originally Posted by powdarrmonkey View Post
    That's exactly what WSUS is designed for. It will fetch the appropriate updates from Microsoft, wait for you to approve them, and then distribute them to the machines as you specify. Takes a few hours to fetch the first cache, but you only have to do that once.

    As you have so many sites and domains, I would have strategically placed child servers in your WSUS topology, much as you would have multiple domain controllers, to minimise bandwidth (each caches, so slow links are more efficient).
    Cheers mate, thought I'd be able to but was a tad worried about bandwidth, guess it doesn't matter either way where the server is as it'll have to do it either locally or via our internal networks which both work over the same connections obviously.

    When I've got time I might actually get 5mins to sit down and organise the whole thing, before my boss turns it into a project that lands on my desk

  6. #5

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,571 Times in 1,251 Posts
    Rep Power
    340
    As already mentioned, WSUS does exactly that - allows you to specify what product(s) and also what type of updates you want to apply (hotfixes, security updates, service packs etc). You can also schedule the downloads to happen over night so it won't affect slower internet connections (especially 1Mbps) during the day.

    In an ideal world you need one server which synchronises with Microsoft (this should be your fastest connection or where the most machines are located). Child servers need to be setup at the weaker points (where internet connections are 1Mbps) - so the updates are distributed within your LAN which would normally be 100Mbps or 1000Mbps.

    In the longterm, I would then eventually (budget providing) have a WSUS server at each site so the update process is fully managed and controlled. The spec for WSUS isn't too high, but (generally speaking) the more machines you have, the more power you'll need. If you're clever about it, you could also specify groups of machines to "check in" to their local WSUS server at certain times to minimise load.
    Last edited by Michael; 18th September 2008 at 10:32 AM.

  7. #6
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    HI

    Have a look at this How to Cheat at Managing Windows ... - Google Book Search

    Its got loads of information that you might find helpful

    Richard

SHARE:
+ Post New Thread

Similar Threads

  1. WSUS Server Problems
    By DSapseid in forum Windows
    Replies: 20
    Last Post: 19th June 2010, 11:54 AM
  2. WSUS Server Specs
    By jamin100 in forum Windows
    Replies: 30
    Last Post: 18th September 2008, 03:22 PM
  3. Replies: 6
    Last Post: 12th June 2007, 06:43 PM
  4. WSUS not connecting to the upstream server
    By ticker in forum Windows
    Replies: 2
    Last Post: 11th June 2007, 01:18 PM
  5. WSUS 3.0 and Sophos on the same Server?
    By tosca925 in forum Windows
    Replies: 8
    Last Post: 7th May 2007, 09:58 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •