Difference between revisions of "Active Directory/Documentation/WSUS"

From WolfTech
Jump to navigation Jump to search
Line 3: Line 3:
 
==Usage Policy==
 
==Usage Policy==
 
*<b>University-Owned Computers</b> - All University-owned computers are automatically configured to use WSUS to install updates.
 
*<b>University-Owned Computers</b> - All University-owned computers are automatically configured to use WSUS to install updates.
*<b>Personal Machines</b> - All personal machines used on the NC State University Network are required to be manually configured to use WSUS. See [[#How_to_Manually_Configure_Your_Personal_Computer]].
+
*<b>Personal Machines</b> - All personal machines used on the NC State University Network are required to be manually configured to use WSUS. See [[WSUS#How_to_Manually_Configure_Your_Personal_Computer]].
*<b>Home Machines</b> - NCSU faculty and staff are encouraged to manually configure their home computers to use WSUS. See [[#How_to_Manually_Configure_Your_Personal_Computer]].
+
*<b>Home Machines</b> - NCSU faculty and staff are encouraged to manually configure their home computers to use WSUS. See [[WSUS#How_to_Manually_Configure_Your_Personal_Computer]].
  
 
==Client Support==
 
==Client Support==

Revision as of 10:22, 31 May 2006

WolfTech's WSUS server provides a convenient way to automatically keep your computer up-to-date with the latest software updates from Microsoft. The prompt installation of security updates is critical to the security of the NC State University Network.

Usage Policy

Client Support

WSUS supports the following client operating systems:

  • Windows 2000 SP3 or later
  • Windows XP
  • Windows Server 2003

Earlier operating systems, such as Windows 95, Windows 98, and Windows ME are not supported. Non-Windows operating systems are not supported.

How to Manually Configure Your Personal Computer

NOTE: You must have local administrative rights on the computer.

  1. Download wsus.reg.
  2. Double click on wsus.reg.
  3. When prompted if you are sure you want to add the information to the registry, click Yes. You should see a confirmation that the information was successfully entered into the registry.
  4. Click OK.
  5. Reboot

WSUS Settings

  • Turn on Automatic Updates
  • Point to UW’s WSUS server – http://wsus.uwaterloo.ca
  • Set the Client-side Target group to - general
  • Auto-download and install patches approved on the WSUS server at the scheduled install time
  • Set the scheduled install time to be 5:00 a.m. any day
  • Reschedule patch installation to the next boot time if the regular scheduled time is missed
  • Specify a 5 minute delay that Automatic Updates will wait, following system start-up, before proceeding with a scheduled installation that was missed previously. This is to ensure that the machine is fully operational before patch installation will occur.
  • Set the option to not restart the computer automatically during a scheduled installation if a user is logged in to the computer. Instead, Automatic Updates will notify the user to restart the computer to complete the installation.