WSUS SERVER (Hyper V) disk size...?

[Koldov]

Hi All,

 

I've created a VM to host a WSUS server and gave it a 100GB disk size.

 

Since adding Win 10 it failed recently due to filling up the disk, so I added another 100GB.

 

Came in this morning to a full disk!

 

I've given it another 100GB, but really how big does it have to be...?

 

That's 300GB now just for WSUS!

 

It currently provides Office 2010, Office 2016, Win7 and Win 10 (LTSB - no drivers, and obviously no features etc).

 

I've run the clean-up wizard.

 

Edit: I do have 'Express Installation Files' on, as I thought the trade off between server vs. client download times might make it easier to manage updating the teacher laptops (are these files really so much bigger than all the individual updates combined?).

[sted]

wsus if especially you have express installation files (which you pretty much need now with windows 10 as thats how updates are done it seems) can be massive im not entirely surprised its over 300gb with 2 versions of windows and 2 of office. I think ive seen it over 500gb before and the cleanup seldom seems to make much difference (sometimes it can but only if its been a long time since it was last run in my experience

[3s-gtech]

Mine's at about 300GB too, hosting updates for Windows 7, Server 2008, 2008 R2, 2012, 2012 R2 and 10 1703, Exchange 2013, SfB Server and Office 2016. It's a battle keeping it trim, but that's just part of it. Be sparing with what you approve, cleanup often, and separate the OS and WSUS disks (or .vhdx)

[bossman]

@Koldov

 

Came across this: https://community.spiceworks.com/topic/2013487-what-size-disk-space-to-allocate-to-a-wsus-server-for-ms-updates

 

Thought of you, might be worth a read for nowt?

 

Merry Christmas

[v01d]

To go along with the above tips, I would also recommend using the following maintenance script to keep things nice and clean.

 

https://community.spiceworks.com/scripts/show/2998-adamj-clean-wsus

[dapaulio]

Are you approving all updates including the superseded?

Right click on column header and tick supersede.

Sort the update by the supersede column

Only approve updates with no symbol and where the top box is highlighted.

The rest should be superseded

All superseded updates can be declined then cleaned up

[Koldov]

Thanks All,

 

Yes, it seems I do have some sort of automatic approval thing going on... There were quite a few superseded updates that had already been approved for install.

 

Still, so far we seem to be levelling out at just over 250GB - most are installed now anyway, but I will keep a closer eye on it in future.

[Koldov]

I do have one Windows 10 install though which isn't controlled by WSUS and today it installed a couple of updates I haven't seen on my others...

 

Flash, Adobe and a couple of Cumulative Updates.

 

I have only got Critical, Definition and Security updates ticked on the 'Classifications' tab in WSUS and I'm wondering which others to tick so that I can still keep in minimal but without compromising....?

 

Where would you even allow Flash and Adobe updates from WSUS?

 

I had a look through the 'Products' tab and couldn't find them....

[3s-gtech]

Windows 10 will communicate with Windows Update directly, bypassing WSUS, unless you tell it not to using Group Policy. I recommend doing this, or you may lose version control (with 1703, 1709 etc automatically installing on your PCs).

[Koldov]

Yeah, all the others are on the WSUS server with a GP telling them not to contact WU (I think/hope/pray).

 

We are on LTSB 2016, so hopefully avoiding version updates...?

 

Just have one test PC that isn't on WSUS and must be getting updates from WU, so I'm wondering if it got Flash and Adobe directly from WU, how I get those updates from WSUS for the rest?

[3s-gtech]

Flash comes through WSUS, has done since Windows 8. Should show in the list. No other Adobe software does.

[Koldov]

MY mistake - just looked through what updates it installed and it was just Flash.

 

Can't see it named specifically in the list for WSUS though... Do you know what it comes under Flash/Adobe etc...?

 

It all just blurs into one after scrolling a few times!

[v01d]

MY mistake - just looked through what updates it installed and it was just Flash.

 

Can't see it named specifically in the list for WSUS though... Do you know what it comes under Flash/Adobe etc...?

 

It all just blurs into one after scrolling a few times!

May 2017+ updates will be listed as...

YYYY-MM Security Update for Adobe Flash Player for Windows  for x-based Systems (KB<#>)

Older pre-May 2017 updates are listed as...

Update for Adobe Flash Player for Windows  for x-based Systems (KB<#>)

 

If you click on "Search" on the right-hand side of the WSUS console you can type in "Update for Adobe Flash" to see all the updates (approved/unapproved/declined etc...) visible on your WSUS server currently.

Edited December 18, 2017 by v01d