Windows Server

Installing WSUS 2016

Microsoft Backs Down From Skylake Support Limits

Over the years, I’ve used a variety of flavors of Windows Update Services (WSUS) to keep my test domain current on patches and updates, since I don’t have time to do it manually. I expect many of you use WSUS for the same reason. And although the product may not get a lot of love and attention, I personally still think it is relevant and even had someone ask me recently on Twitter about WSUS in Windows Server 2016 and whether it “still mattered.” I think it does, so let me show you how easy it is to install.



Sponsored Content

What is “Inside Microsoft Teams”?

“Inside Microsoft Teams” is a webcast series, now in Season 4 for IT pros hosted by Microsoft Product Manager, Stephen Rose. Stephen & his guests comprised of customers, partners, and real-world experts share best practices of planning, deploying, adopting, managing, and securing Teams. You can watch any episode at your convenience, find resources, blogs, reviews of accessories certified for Teams, bonus clips, and information regarding upcoming live broadcasts. Our next episode, “Polaris Inc., and Microsoft Teams- Reinventing how we work and play” will be airing on Oct. 28th from 10-11am PST.

I have a fresh Windows Server 2016 Server Core installation that I intend to use as my WSUS server. I’ve installed nothing else. The only thing I’ve taken into consideration is disk space. Personally, I like to have at least 10GB of free space for all of the WSUS material.  Because there is no requirement to install or manage anything from the server console, I don’t need a full desktop experience on the server, so Server Core should suffice. Instead, I have a Windows 10 client with Remote Server Administration Tools (RSAT) installed. That’s where you should be managing from.

I open up Server Manager and add the new server. Right-click All Servers and select “Add Servers.” Enter the name of the new server.

Adding a new server to Server Manager

Find the server and click the little arrow icon to select it. Click OK. Now to set up the new WSUS server. I’m keeping things simple here with a single server. In Server Manager, click “Manage” then “Add Roles and Features.” If you see a “Before You Begin” page, click Next.

At this point we can begin the installation process. You want to select a role-based installation.

Selecting Role or Feature installation

Find your server in the list and select it.

Selecting the target

Next you’ll select the Windows Server Update Services role.

Selecting the role

As soon as you select the box, you’ll be prompted to install other required features, such as different IIS features. Go ahead and install those as well.

The next page will show you Windows features to be installed.

Selecting Windows Features

Be very careful not to uncheck anything here, as some of the items were enabled to support the WSUS installation. Clicking Next displays a brief notice about WSUS. Read it and click Next.

Here you’ll see a summary of related WSUS services.

Service summary

Even though I have a SQL Server in my network, I’m going to use the Windows Internal database for WSUS, so I’ll leave this as-is and click Next.

Set content location

One of the final steps is to specify the location for the downloaded updates. I entered a path relative to the server. Make sure you have plenty of disk space.

Moving on, you’ll encounter information about IIS, which you need. I don’t plan on using the IIS installation on CHI-WSUS for anything other than WSUS, so I’ll accept the defaults.

IIS default services

The last page confirms your selections.

Installation confirmation

I tend to reboot the server after installation, regardless of whether the feature or role actually requires it. But I prefer to manually initiate the reboot. One thing you might want to do is click the “Export configuration settings” link at the bottom. This will save all of your choices to an XML file, which you can use in PowerShell to achieve the same result. I look at PowerShell options in “Automating WSUS 2016 Installation with PowerShell,” so I saved a copy and clicked Install.

Installation in progress

At this point, you can close the window and check later to see if the installation is complete. Or, if you’re like me, you can leave the window open. In my experience, this process does not take very long. Click Close when finished.

Although not a requirement, I like rebooting, anyway. Nobody is using this server yet, so there’s no impact.

Restart the server

While the server is rebooting, which because I’m using Server Core is pretty quick, you’ll also see a new entry in Server Manager.

The WSUS feature

Because this is a brand new installation, there is some initial configuration. Click More.

Task details

Clearly there’s more I’m supposed to do, so I click the “Launch Post-Installation tasks” link. Server Manager spins its wheels for a minute and I’m done. I can right-click the server name and open up Windows Server Update Services.

Connecting to WSUS

Eventually I might configure the server for SSL, but for now I’m satisfied with the defaults. From here I get another wizard.

WSUS configuration wizard

If you want to configure the server now, go ahead and step through the wizard. It should be self-explanatory. When finished, you’ve added a new WSUS server!

This is not a process I expect you to do on a regular basis, but it can be automated. That’s a topic I cover in “Automating WSUS 2016 Installation with PowerShell.”

Related Topics:


Don't have a login but want to join the conversation? Sign up for a Petri Account

Comments (0)

Leave a Reply

External Sharing and Guest User Access in Microsoft 365 and Teams

This eBook will dive into policy considerations you need to make when creating and managing guest user access to your Teams network, as well as the different layers of guest access and the common challenges that accompany a more complicated Microsoft 365 infrastructure.

You will learn:

  • Who should be allowed to be invited as a guest?
  • What type of guests should be able to access files in SharePoint and OneDrive?
  • How should guests be offboarded?
  • How should you determine who has access to sensitive information in your environment?

Sponsored by: