Home
.. About WSUS Wiki

WSUS
.. WSUS FAQ
.. WSUS on SBS
.. WSUS Troubleshooting
.. WSUS News Groups
.. Known WSUS Issues
.. WSUS Links
.. WSUS Wish List

WSUS Documents
.. WSUS Deployment Guide
.. WSUS Installation Guide
.. WSUS Release Notes
.. WSUS Best Practice

SUS
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues

Wiki Community

 .. Wiki Contributors
.. I Love WSUS
.. WSUS Wiki Diary
.. Wiki Statistics
.. To Do Page

Miscellaneous Stuff
.. Other Resources
.. Do You Know?

Currently, the AU client is configured either to use Microsoft's WU servers, or to to obtain a list of approved updates from an internal WU server and then to download the updates based on the policy specified at the WU server. In a small deployment, this is not an issue, but in larger, AD-based environments, this can be a problem in that it can lead to the need for additional WU Servers (i.e a server for those computers that download from the Internet and a server for computers downloading from an internal WSUS server.

The client policy settings should be extended to enable the client to specify which WU server to obtain updates from separately from the server that the approvals are obtained from. The client contacts the server specified in the current WSUS policy to determine the approved updates that need to be applied. Then, the client would either download these updates from the WU server specified in the policy or use the options specified by the approval list WU server.

This needs a new registry value:

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Value: WUDownloadServer
Type: Reg_SZ

If this value is not present, the AU client determines where to download updates based on the settings specified in the WSUS Server value entry. If the value key has null string, or has the value of 'Microsoft', then the AU client should obtain oupdates from Microsoft's WU Server. Otherwise, the value should hold a full URL to the WU server to obtain updates from (including port number).

Thanks to Ulf Simon-Weidner for this great idea!

Resolution for WSUS RTM

tba - but it IS a great idea!!