Software:Windows Server Update Services
 WSUS can display precise information about which updates each client needs | |
| Operating system | Windows Server |
|---|---|
| Type | Package management, remote administration |
Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program and network service developed by Microsoft Corporation that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers in a corporate environment. WSUS downloads these updates from the Microsoft Update website and then distributes them to computers on a network. WSUS is an integral component of Windows Server.
History
The first version of WSUS was known as Software Update Services (SUS).[1] At first, it only delivered hotfixes and patches for Microsoft operating systems. SUS ran on a Windows Server operating system and downloaded updates for the specified versions of Windows from the remote Windows Update site, which is operated by Microsoft. Clients could then download updates from this internal server, rather than connecting directly to Windows Update.[2] Support for SUS by Microsoft was originally planned to end on 6 December 2006, but based on user feedback, the date was extended to 10 July 2007.[3]
WSUS builds on SUS by expanding the range of software it can update. The WSUS infrastructure allows automatic downloads of updates, hotfixes, service packs, device drivers and feature packs to clients in an organization from a central server or servers.
Operation
Windows Server Update Services 2.0 and above operate on a repository of update packages from Microsoft. It allows administrators to approve or decline updates before release, to force updates to install by a given date, and to produce extensive reports on which updates each machine requires. System administrators can also configure WSUS to approve certain classes of updates automatically (critical updates, security updates, service packs, drivers, etc.). One can also approve updates for detection only, allowing an administrator to see which machines will require a given update without also installing that update.
WSUS may be used to update computers on a disconnected network. This requires exporting patch data from a WSUS server connected to the internet and, using removable media, importing to a WSUS server set up on the disconnected network.[4]
Administrators can use WSUS with Group Policy for client-side configuration of the Automatic Updates client, ensuring that end-users can't disable or circumvent corporate update policies. WSUS does not require the use of Active Directory; client configuration can also be applied by Local Group Policy or by modifying the Windows registry.
WSUS uses .NET Framework, Microsoft Management Console and Internet Information Services. WSUS 3.0 uses either SQL Server Express or Windows Internal Database as its database engine, whereas WSUS 2.0 uses WMSDE. System Center Configuration Manager (SCCM) interoperates with WSUS and can import third party security updates into the product.[5]
Licensing
WSUS is a feature of the Windows Server product and therefore requires a valid Windows Server license for the machine hosting the service. The fact that user workstations authenticate themselves to the WSUS service to retrieve their updates makes it necessary to acquire a fileserver client access license (CAL) for each workstation connecting to the WSUS service.[6] Fileserver CAL for WSUS is the same CAL as the one required for connecting to a Microsoft Active Directory, fileserver and printserver, and has to be acquired once for a device or a user.
WSUS is often considered as a free product because fileserver CAL are already paid for in an enterprise network that has a Microsoft Active Directory and thus do not need to be acquired again.[6]
In a network using Samba Active Directory, it is not necessary to purchase CALs to connect to the domain controller or connect to a Samba file server. However, the use of a WSUS server will still require the purchase of client access licenses for all Windows workstations that will connect to the WSUS server.[7]
Version history
| Version | Date | Comments |
|---|---|---|
| 2.0 Release Candidate | 22 March 2005 | |
| 2.0 | 6 June 2005 | |
| 2.0 Service Pack 1 | 31 May 2006 | Adds support for Windows Vista clients, additional client languages, and using Microsoft SQL Server 2005 as a database backend, as well as performance improvements with the web-based user interface |
| 3.0 Beta 2 | 14 August 2006 | MMC based UI and loads of new features |
| 3.0 Release Candidate | 12 February 2007 | |
| 3.0 | 30 April 2007 | WSUS 3.0 and WSUS Client 3.0 were made available via WSUS on 22 May 2007[8] |
| 3.0 Service Pack 1 Release Candidate | 1 November 2007 | |
| 3.0 Service Pack 1[9] | 7 February 2008 | |
| 3.0 Service Pack 2 | 25 August 2009 | Part of Windows Server 2008 R2 |
| 4.0[10] | 26 October 2012 | Part of Windows Server 2012 and 2012 R2[10] |
| 5.0[11] | 26 September 2016 | Part of Windows Server 2016[11] |
| 10.0.17763 | 2019 | Part of Windows Server 2019 |
| 10.0.20348.1 | 2021 | Part of Windows Server 2022 |
References
- ↑ Foust, Mark; Chellis, James; Sheltz, Matthew; Sage London, Suzan (2006). "Chapter 7: Planning Server-Level Security". MCSE Windows Server 2003 network infrastructure planning and maintenance study guide. Hoboken, New Jersey: John Wiley and Sons. p. 532. ISBN 978-0-7821-4450-5.
- ↑ "Software Update Services". Microsoft TechNet. Microsoft Corporation. https://technet.microsoft.com/en-us/windowsserver/bb466186.aspx.
- ↑ Keizer, Gregg (16 Nov 2006). "Microsoft Keeps Software Update Services Alive Until July". InformationWeek (UBM TechWeb). http://www.informationweek.com/news/194400595.
- ↑ "Set Up a Disconnected Network (Import and Export Updates)". https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127442.
- ↑ "About System Center Updates Publisher". Microsoft. https://technet.microsoft.com/en-us/library/bb632895.aspx.
- ↑ 6.0 6.1 "WSUS Server license is required". Microsoft TechNet. 31 July 2016. https://social.technet.microsoft.com/Forums/en-US/6ca141a5-835d-4d42-8954-aadca905d0cf/wsus-server-license-is-required?forum=winserverwsus.
- ↑ "WSUS and CAL Licenses". https://social.technet.microsoft.com/Forums/windowsserver/en-US/82046da9-19ab-4e27-b855-e7c8cfea10a5/wsus-and-cal-licenses?forum=winserverwsus.
- ↑ Harder, Bobbie (22 May 2007). "Updates for WSUS available today". WSUS Product Team Blog. Microsoft. http://blogs.technet.com/b/wsus/archive/2007/05/22/updates-for-wsus-available-today.aspx.
- ↑ Cole, Cecilia (7 Feb 2008). "WSUS 3.0 SP1 is now RTM". WSUS Product Team Blog. Microsoft. http://blogs.technet.com/b/wsus/archive/2008/02/07/wsus-3-0-sp1-is-now-rtm.aspx.
- ↑ 10.0 10.1 Henry, Steve (15 September 2016). "Update on WSUS 3.0 SP2 End of Life". WSUS Product Team Blog. Microsoft. https://blogs.technet.microsoft.com/wsus/2016/09/15/update-on-wsus-3-0-sp2-end-of-life/.
- ↑ 11.0 11.1 Henry, Steve (2 March 2018). "WSUS Catalog import failures". WSUS Product Team Blog. Microsoft. https://blogs.technet.microsoft.com/wsus/2018/03/02/catalog-import-failure/.
External links
- on Microsoft Docs
 |  |
