Configure Windows Server Core Windows Update
Configuring Windows Update settings on a Windows Server Core installation can be performed using the SConfig menu or via the command line. This article describes the steps and commands needed to configure the Windows Update settings. Server Core allows for Windows updates to be installed in the following ways:
Using automatic Windows Update or with Windows Server Update Services (WSUS). By using Windows Update, either automatically or with the WSUS command-line tool, you can service servers running a Server Core installation.
Manually. Even in organizations that don't use Windows update or WSUS, you can apply updates manually.
Prerequisites
- Your device must have an active internet connection.
- The user account performing Windows updates should be a member of the Administrators, Domain Admins, or Enterprise Admins group.
- If the server is a member of a domain, the Windows Update Agent must be configured properly through Group Policy. Server Core devices only support option 4, Auto download and schedule the install, as mentioned in Configuring Automatic Updates by using Group Policy. See also the Group Policy Settings Reference for Windows and Windows Server.
View the installed updates
Before you add a new update to Server Core, check that the latest Windows updates are installed by running one of the three commands:
Get-Hotfix
systeminfo
wmic qfe list
There might be a short delay running systeminfo as the tool inspects your system.
Configure Windows updates via SConfig
Depending on which version of Windows Server Core you're running, the SConfig menu loads once you sign in. If the SConfig menu doesn't appear, run sconfig and select Enter. Once the menu loads, perform the following steps to configure your settings:
Type 5, select Enter. Select one of these options, then select Enter.
- 1) Automatic
- 2) Download only
- 3) Manual
Type 6, select Enter. Select one of these options, then select Enter.
- 1) All quality updates
- 2) Recommended quality updates only
- 3) Feature updates
Configure Windows updates via command line
To verify the current Windows Update setting, run the following command:
%systemroot%\system32\cscript %systemroot%\system32\scregedit.wsf /AU /v
To enable automatic updates, run the following command:
Net stop wuauserv
%systemroot%\system32\cscript %systemroot%\system32\scregedit.wsf /AU /v 4
Net start wuauserv
To disable automatic updates, run the following command:
Net stop wuauserv
%systemroot%\system32\cscript %systemroot%\system32\scregedit.wsf /AU /v 1
Net start wuauserv
To force Windows Update to immediately detect and install any available updates, run the following command:
wuauclt /detectnow
Depending on the updates that are installed, you might need to restart the computer. The system doesn't notify which updates require a reboot. To determine if the installation process completed, open Task Manager by running taskmgr and verify that either the wuauclt, or Trusted Installer processes aren't actively running.
Manually apply a Windows Server update
Download the .msu update file and run the following command to install the update:
wusa <update>.msu /quiet
To manually uninstall an update, run the following command:
wusa /uninstall <update>.msu /quiet