Notre Dame Windows Software Update Service (WSUS)

What is the ND Windows Software Update Service (WSUS)?

The Windows Software Update Service provides ND users a more efficient way to get updates to Windows machines. By using the ND WSUS, your computer will be configured to automatically download and poll for Microsoft product updates.

What are the requirements for using the Automatic Updates component?

Automatic Updates is the client component of WSUS. Automatic Updates has no hardware requirements other than being connected to the network. You can use Automatic Updates with WSUS on computers running any of the following operating systems:

• Microsoft Windows2000 Professional Service Pack4, Windows2000 Server SP4, or Windows2000 Advanced Server SP4
• Microsoft WindowsXP Professional, Service Pack1 or Service Pack2
• Microsoft WindowsServer2003, all versions and service packs
• Microsoft Vista
• Users must be on the Notre Dame network. If a machine tries to connect to WSUS from off- campus, it will be denied and the Automatic Updates client will check Microsoft’s servers for updates. Note: You can still manually go to Microsoft windows update site to download patches even if you are using WSUS.

How do I start using the ND Windows Update Service?

• You can add it to your Group Policy Object editor or run this file instead: https://oit.nd.edu/software/common/wsus/ndsus.exe
  (NetID & Password required)
  
  Note: When accessing this link using Firefox, you will need to save the file to your desktop and then run it from there.

How do I add ND Widows Update Service to my Group Policy Object editor?

In order to view policy settings to manage WSUS, you will need to ensure that the WSUS administrative template file, wuau.adm, is added to the Group Policy Object Editor. Because the wuau.adm template is released by default in the operating system, it should already be present in the Group Policy Object Editor.

To add the WSUS Administrative Template:

1. In Group Policy Object Editor, select either of the Administrative Templates nodes.
2. On the Action menu, click Add/Remove Templates and then click Add.
3. In the Policy Templates dialog box, click wuau.adm, and then click Open.
4. In the Add/Remove Templates dialog box, click Close.

To configure Automatic Updates:

1. In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then select Windows Update.
2. In the details pane, double-click Configure Automatic Updates.
3. Click Enabled.
4. Select one of the following options:
   • Notify for download and notify for install: This option notifies a logged-on administrative user before the download and before the installation of the updates.
   • Auto download and notify for install: This option automatically begins downloading updates and then notifies a logged-on administrative user before installing the updates.
   • Auto download and schedule the install: {Recommended} If Automatic Updates is configured to perform a scheduled installation, you must also set the day and time for the recurring scheduled installation.
   • Allow local admin to choose setting: With this option, local administrators are allowed to use Automatic Updates in the Control Panel to select a configuration option of their choice. For example, they can choose their own scheduled installation time. Local administrators are not allowed to disable Automatic Updates.
5. Click OK.

To point your client computer to the WSUS server:

1. In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then select Windows Update.
2. In the details pane, double-click Specify intranet Microsoft update service location.
3. Click Enabled.
4. Enter http://ndsus.nd.edu in both the Set the intranet update service for detecting updates box and in the Set the intranet statistics server box.
5. Click OK.

 

How can I manually initiate updates from the WSUS server?

To manually initiate detection by the WSUS server:

1. On the client computer click Start, and then click Run.
2. Type cmd in the Open dialog box, and then click OK.
3. Type wuauclt.exe /detectnow at the command prompt. This command-line option instructs Automatic Updates to contact the WSUS server immediately.