WSUS Setting Defaults

Clients

Computer Configuration – Administrative templates – Windows Components – Windows Update

Do not display “Install Updates and Shut Down” option in Shut Down Windows dialog box Disabled
Do not adjust default option to “Install Updates and Shut Down” in Shut Down Windows dialog box    Disabled
Configure automatic updates Enabled
– Configure Automatic Updating 4 – Auto download and schedule the install
– Scheduled install day 0 – Every Day
– Scheduled install time 12:00
Specify intranet Microsoft update service location Enabled
– Set the intranet update service for detecting updates:                          http://wsusserver
– Set the intranet statistics server: http://wsusserver
Enable clients-side Targeting Enabled
– Target group name for this computer                                                Clients
Reschedule Automatic Updates scheduled installations Enabled
– Wait after system startup (minutes) 30
No auto-restart for scheduled Automatic Updates installation Enabled
Automatic Updates detection frequency Enabled
– Check for updates on the following interval (Hours) 22
Allow Automatic Updates immediate installation Enabled
Delay Restart for scheduled installation Disabled
Re-prompt for restart with scheduled installations Disabled
Allow non-administrators to receive update notification Disabled
Enable recommended updates via Automatic Updates Enabled
Enable Windows Update Power Management to automatically to wake up the system to install scheduled updates Enabled
Allow signed content from intranet Microsoft update service location Enabled

 

Servers 

Computer Configuration – Administrative templates – Windows Components – Windows Update

Do not display “Install Updates and Stut Down” option in Shut Down Windows dialog box Enabled
Do not adjust default option to “Install Updates and Shut Down” in Shut Down Windows dialog box    Enabled
Configure automatic updates Enabled
– Configure Automatic Updating 3 – Auto download and notify for install
– Scheduled install day 0 – Every Day
– Scheduled install time 22:00
Specify intranet Microsoft update service location Enabled
– Set the intranet update service for detecting updates:                          http://wsusserver
– Set the intranet statistics server: http://wsusserver
Enable clients-side Targeting Enabled
– Target group name for this computer                                                Servers
Reschedule Automatic Updates scheduled installations Enabled
– Wait after system startup (minutes) 30
No auto-restart for scheduled Automatic Updates installation Enabled
Automatic Updates detection frequency Enabled
– Check for updates on the following interval (Hours) 22
Allow Automatic Updates immediate installation Disabled
Delay Restart for scheduled installation Disabled
Re-prompt for restart with scheduled installations Disabled
Allow non-administrators to receive update notification Disabled
Enable recomended updates via Automatic Updates Enabled
Enable Windows Update Power Management to automatically to wake up the system to install scheduled updates Disabled
Allow signed content from intranet Microsoft update service location Enabled

Leave a Reply