Compartilhar via

WSUS deployment without AD

  • Artigo

Recently, one of my customer wanted WSUS deployment without AD.

https://www.microsoft.com/windowsserversystem/updateservices/downloads/WSUS.mspx (Deployment Guides)
Filename: Deploying Microsoft Windows Server Update Services.doc

WSUS deployment with AD, it's very simple. Just follow the steps of document.
WSUS deployment without AD, it's a little bit confusing. There wasn't enough guidance.

In a non-Active Directory environment, you can configure Automatic Updates by using any of the following methods:

· Using Group Policy Object Editor and editing the Local Group Policy object

· Editing the registry directly by using the registry editor (Regedit.exe)
>> I'm going to explain this.
                

            The registry entries for the Automatic Update configuration options are located in the following subkey:

              HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

        1) How to download, and install at a designated time (Refer to the above link to get a deployment guideline: Page72)

Entry Name

Value Range and Meanings

Data Type

AUOptions

Range = 2|3|4|5

2 = Notify before download.

3 = Automatically download and notify of installation.

4 = Automatic download and scheduled installation. (Only valid if values exist for ScheduledInstallDay and ScheduledInstallTime.)

5 = Automatic Updates is required, but end users can configure it.

Reg_DWORD

        2) Reboot system after installation (Page 74)

ScheduledInstallDay

Range = 0|1|2|3|4|5|6|7

0 = Every day.

1 through 7 = The days of the week from Sunday (1) to Saturday (7).

(Only valid if AUOptions equals 4.)

Reg_DWORD

ScheduledInstallTime

Range = n; where n = the time of day in 24-hour format (0-23).

Reg_DWORD

UseWUServer

The WUServer value is not respected unless this key is set.

Reg_DWORD