Shulou(Shulou.com)06/02 Report--

The WSUS service requires that the update component be configured using gpedit.msc on the client. Configure it on a computer as needed, and then export the registry file for use. For example, the planned installation time is set before and after leaving work at 17:00.

WSUS Group Policy configuration:

1. Start "running" the gpedit.msc Local Group Policy Editor

2. Computer configuration "Administrative templates" Windows component "Windows update" or Windows Update "configuration automatic update" specifies the location of the Intranet Microsoft update service.

3. Configure automatic updates "enable" automatic downloads and plan to install "perform installation during automatic maintenance" to determine the "17:00" application every day.

4. Specify the Intranet Microsoft update service location "enabled" setting to detect updates of the Intranet update service: http://yourserverIP:8530 "set Intranet statistics server: http://yourserverIP:8530" application "to determine.

5. Start "running" CMD "wuauclt / detectnow" netstat-an to check whether there is a connection to the upgraded IP address. If so, it means that the WSUS server is working properly. Watch the spaces!

6. Start "running" regedit "HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate key export."

7. The content of the exported text.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate]

"WUServer" = "http://10.10.10.10:8530""

"WUStatusServer" = "http://10.10.10.10:8530""

"UpdateServiceUrlAlternate" = ""

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate\ AU]

"UseWUServer" = dword:00000001

"NoAutoUpdate" = dword:00000000

"AUOptions" = dword:00000004

"ScheduledInstallDay" = dword:00000000

"ScheduledInstallTime" = dword:00000003

"ScheduledInstallEveryWeek" = dword:00000001

Save as a WSUS.reg file and execute the WSUS.reg registry file on the client.

=

There is no test below!

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate]

"WUServer" = "http://wsus.yoursite.com""

Set up your wsus server IP:8530

"WUStatusServer" = "http://wsus.yoursite.com""

Set up your statistics server IP:8530

"ElevateNonAdmins" = dword:00000001

When set to 1, non-administrative group members can also patch the computer

"TargetGroupEnabled" = dword:00000001

Note: only when this is set, the client's computer can be detected by wsus's server!

"TargetGroup" = ""

Target group-that is, the computer group in which the client automatically registers with the wsus server, can be empty.

Without these two keys in many registries on the Internet, the client can not be detected by the wsus server, thus unable to manage the client.

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Policies\ Microsoft\ Windows\ WindowsUpdate\ AU]

"NoAutoUpdate" = dword:00000000

Set to 0, indicating automatic upgrade

"AUOptions" = dword:00000004

Set to 4, which means that it is automatically installed after download. 3 is to remind the installation

"ScheduledInstallDay" = dword:00000000

Set to 0, which means that the upgrade is detected every day

"ScheduledInstallTime" = dword:0000000a

Set the time to install the patch, because AUOptions is set to 4, so here set the automatic installation time to a, that is, the decimal 10: 00 am, to 10: 00 am, automatically install the patch.

"UseWUServer" = dword:00000001

Use wsusserver, your own wsus server, instead of going to Microsoft's website to upgrade.

"AutoInstallMinorUpdates" = dword:00000001

Set to 1, indicating that the background installation, that is, quietly, the patch has been hit.

"RebootRelaunchTimeoutEnabled" = dword:00000001

Set to 1 to set the following parameters

"RebootRelaunchTimeout" = dword:00000014

Indicates the interval between prompts for restart, set here to 20 minutes, hexadecimal

"RescheduleWaitTime" = dword:00000005

If an update missed the installation time, the next boot prompt time, for example, you did not boot at 10: 00 in the morning, naturally did not install, set this parameter, indicates that 5 minutes after boot, prompt you to install.

"RescheduleWaitTimeEnabled" = dword:00000001

Set to 1, the above key setting is valid.

"NoAUAShutdownOption" = dword:00000001

?

"NoAUAsDefaultShutdownOption" = dword:00000001

?

"DetectionFrequencyEnabled" = dword:00000001

If it is set to 1, the following parameters are valid.

"DetectionFrequency" = dword:00000022

Set the frequency of detection to 22, once a day.

"NoAutoRebootWithLoggedOnUser" = dword:00000001

Set to 1, indicating that the user can choose whether to restart later. If set to 0, restart within 5 minutes.

"RebootWarningTimeout" = dword:00000010

Prompt the time to restart after installing the planned upgrade

"RebootWarningTimeoutEnabled" = dword:00000001

Set to 1, the above key setting is valid. If set to 0, the default is 10 minutes.

[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Run]

"WSUS Update" = "wuauclt.exe / detectnow"

CMD executes wuauclt / detectnow and then netstat-an to check if there is a connection to the upgrade address, if any, indicating that the settings are correct and that the WSUS server is working properly.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.