What do other primary schools do for Windows updates?

[edutech4schools]

I have always had a WSUS server in the primary school but that is not an option for the moment as the old second server went pop.

 

I could probably find some old pc and get WSUS installed but wondered what other primary schools do for windows updates. Do you have a WSUS server or simply use the default MS updates?

[LeMarchand]

When I started at my schools it was machines updating via MS updates individually. All schools now use WSUS. 2 have a virtual server handling WSUS/WDS/KMS, 1 has a single "everything" including WSUS server, but next time the server is replaced it will be a bunch of virtual machines.

 

IME primaries don't have the funds to warrant 1 server/function.

Edited November 19, 2014 by LeMarchand
Typo

[witch]

My primary has one server which does the lot including WSUS

[Steve21]

WSUS on the single server at most of the ones we used to support.

 

Steve

[SHimmer45]

have used the WSUS offline util before in an older primary school which didnt have the infrastructure for a WSUS.

WSUS Offline Update - Update Microsoft Windows and Office without an Internet connection

 

worked pretty well, also ideal for an ISO of updates for none internet connected machines

[Blue_Cookeh]

SCCM... a bit overkill for our school but it's been incredibly useful for remote support and client monitoring.

[Sheridan]

WSUS on all of the ones we support.

[sparkeh]

SCCM (its peanuts under EES-OVS).

[jmair]

We also use WSUS. It was worth it just to see the bandwidth open up a little bit.

[elsiegee40]

We only had one server when we started and it had everything on it, including WSUS. Two servers now and still using WSUS

[edutech4schools]

Does anyone know if it is possible to get the WSUS updates to be stored on a USB drive if it is attached to the server. I do not have a massive amount of space on the main server.

[Joanne]

My machines are left free and wild, to update when they please and at the most inopportune times. I found when I had WSUS in other schools, I always forgot to give the thumbs up to the updates...

 

A nice GPO setting which prevents the automatic shutdown and update is all that is needed for the free and wild method. It can be found in Computer Config | Windows Settings | Admin Templates | Windows Components | Windows Updates | Enable No auto-restart with logged on users for scheduled automatic updates installations.

[sparkeh]

Does anyone know if it is possible to get the WSUS updates to be stored on a USB drive if it is attached to the server. I do not have a massive amount of space on the main server.

Sure, can't see why not.

[LeMarchand]

IIRC you can specify where you want the store, but I would suspect that a USB drive would cause a bottleneck.

 

Could you setup an older machine as a NAS?

[sted]

IIRC you can specify where you want the store, but I would suspect that a USB drive would cause a bottleneck.

 

Could you setup an older machine as a NAS?

 

or just spend £45 on a 1tb sata drive if its just wsus updates dosent need backing up/raid/ a clever drive its just being used as a file dump or even just nick a hdd from a dead workstation

[win]

I recommend WSUS, if that is not possible then you can change group policy for them to auto-update directly from microsoft. It will tax your bandwidth when they download them but better than having unpatched computers.

[Michael]

Either plug in an external USB drive, or set WSUS to download straight from Microsoft rather than download and cache on your local WSUS server. The only problem is your internet connection will quickly get used up. A properly setup WSUS instance, downloading files once into a local cache and distributing via your LAN is the way to go.

 

I've seen schools without WSUS and to be honest, it's an absolute joke. Inconsistency is an understatement.

 

Alternatively if you're really stuck, disable the Windows Update service altogether (via a GPO), but this isn't something I'd recommend.