WSUS Maintenance

[Cache]

Hi All

 

Just curious as to what maintenance people carry out on WSUS?

 

I have a script which reindex's the database once a month, and another that automatically runs the Server Cleanup Wizard.

 

Despite that, after importing September's Microsoft CSA XP packages, I managed to kill the WSUS server completely which my google-fu only turns up an unhelpful suggestion that I have too many updates in the WSUS database.... So now I'm trying a restore before I just wipe out wSUS completely and rebuild the whole damn lot.

 

Does anyone carry out any other maintenance on WSUS? Before importing the CSA XP Packages, WSUS always worked without a hitch.

[3s-gtech]

I used to run the re-index script, but now it's on its own VM on Server 2012 R2 I just leave it be. If I run the Cleanup Wizard with all options selected it always errors out - too much to do! Works okay otherwise. Try a rebuild, or even try moving the role to another server to see if it fires up there (WSUS is mega easy to export wholesale).

[pete]

When something goes EOL or we stop using it (Vista, XP, old Office or IE versions) I go through and manually decline patches for the software that we've approved (WSUS doesn't clear out approved and still valid patches even if you untick the product), but other than that basically the same as you - server cleanup wizard and the database script.

[Cache]

Well it was a reasonable excuse to test that my backups worked anyway and it didn't take that long using Veeam.

 

I didn't think I was doing anything out of the ordinary. I've been through today on the server and unapproved a lot of Superseeded updates and quite a few for Windows XP as we are down to the last couple of machines now, but haven't ventured as far as trying to reimport the CSA updates again yet. It seems it was caused because importing them causes WSUS to revalidate the downloaded updates (after 5 days it still hadn't manage to reconcile them because it kept hitting a timeout), but yet the Server Cleanup Wizard runs without a hitch. Just pretty annoying as otherwise I quite like the setup and leave it aspect of it.

 

Might try importing them again next week.

Edited October 2, 2014 by Cache

[newpersn]

What's it worth if you have just the updates pushed down from Ms.

By uninstalling wsus and formatting (in my case) and reinstalling wsus?

[Edu-IT]

What's the process to remove XP updates? Is it manually declining them all?

[pete]

What's the process to remove XP updates? Is it manually declining them all?

 

Yup, I created a new update view for XP and filtered on "approved" and status "any". Just be a bit careful around the .Net and XML patches that are XP and a bunch of other OS too.

[Edu-IT]

So you can't actually delete them to free up space?

[3s-gtech]

When you set them to Declined then run a server cleanup, they get removed from the server if no longer needed so will free up space.