Tutorials

How to install and configure WSUS on Windows Server 2016 Essentials (TP3)

How to install and configure WSUS on Windows Server 2016 Essentials (TP3)

Last week I published an article on installing WSUS on Windows Server 2012 R2 Essentials and found that Windows 10 was shown as a Vista client. Now that we have TP3 I am wondering if this has been fixed in the latest build of Windows Server 2016 (TP3). Installing WSUS on the server is easy. Either you do that from the server manager or from Powershell. Both methods will be covered in this tutorial.

We will also have a look at the GPO’s that are needed to have WSUS work with GPO’s and Computer Groups and last but not least we hope to see that WSUS reports Windows 10 as a Windows 10 client and not as a Vista. It seems that Windows 10 is reported as Windows 10 in the WSUS version included in Windows Server 2016 Essentials.

Installing WSUS on Windows Server 2016 is done from the Server Manager. We start the 'Add Roles and Features wizard' and make our choices.

  1. From the Server Manager start ‘Add roles and features’
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  2. Click Next
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  3. Choose Role-based or feature-based installation and click Next.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  4. Choose your server and click Next.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  5. Check ‘Windows Server Update Services’
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  6. Click ‘Add features’.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  7. Choose Next
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  8. Choose Next.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  9. Choose Next
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  10. Choose Next
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  11. Choose a drive with lots of space (not your system drive) and choose Next.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  12. Choose install.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  13. Choose ‘Launch post-installation tasks’.
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016
  14. If the post-installation tasks are ready click Close
    Install WSUS with the Add Roles and Features wizard on Windows Server 2016

You can also install WSUS with some Powershell commands and for those who need to do this more often my advice is to use Powershell. It is much faster if you have some Powershell snippets ready for your daily tasks.

  1. If you want to the above from within Powershell you need to start a Powershell with admin rights. Right click the Powershell icon on your taskbar.
    Install WSUS on your Windows Server 2016 with Powershell
  2. In the Powershell Windows type
    Install-WindowsFeature –Name UpdateServices –IncludeManagementTools
    and hit Enter.
    Install WSUS on your Windows Server 2016 with Powershell
  3. You need an active internet connection for this because it could be needed to download updates.
    Install WSUS on your Windows Server 2016 with Powershell
  4. This went all just fine. WSUS is now installed with a WID. In previous versions you needed to define in Powershell that want a WID, with 2012 R2 that is no longer needed. It assumes that the default is with WID, if you want something else you will have to define that in Powershell.
    Install WSUS on your Windows Server 2016 with Powershell
  5. After this we still need to do PostInstallation work by setting the storage folder for the WSUS downloads. For this you need to change directory to “C:\Program Files\Update Services\Tools\” and run:
    .\WsusUtil.exe PostInstall CONTENT_DIR=D:\WSUS
    Install WSUS on your Windows Server 2016 with Powershell

Before WSUS can 'serve' updates to clients and server it needs to have a 'baseline' for all security updates and patches available. At first download WSUS will also get a new list with updated Operating Systems and Software versions.

  1. From the Server Manager choose Tools and then Windows Server Update Services.
    Configure WSUS on a Windows Server 2016
  2. Click Next
    Configure WSUS on a Windows Server 2016
  3. Click Next
    Configure WSUS on a Windows Server 2016
  4. Choose Next
    Configure WSUS on a Windows Server 2016
  5. Click Next
    Configure WSUS on a Windows Server 2016
  6. Click ‘Start Connecting”.
    Configure WSUS on a Windows Server 2016
  7. This can take awhile to complete.
    Configure WSUS on a Windows Server 2016
  8. Click Next
    Configure WSUS on a Windows Server 2016
  9. Click Next.
    Configure WSUS on a Windows Server 2016
  10. Click Next
    Configure WSUS on a Windows Server 2016
  11. Choose Next
    Configure WSUS on a Windows Server 2016
  12. At this point I do not choose to Synchronize automatically. After we have done all configuration we will rerun this wizard and change that.
    Configure WSUS on a Windows Server 2016
  13. Checking ‘Begin initial synchronization’ will be done later when we rerun this wizard.
    Configure WSUS on a Windows Server 2016
  14. Click Finish
    Configure WSUS on a Windows Server 2016
  15. Right click the ‘All Computers’ hive and add the computer group ‘Clients’. We will use this later in our GPO. Click Add.
    Configure WSUS on a Windows Server 2016
  16. Click Options –> Computers and select ‘Use Group Policy or registry settings on computers’. Click OK. For now we are done with WSUS and we need to configure the GPO’s that will force the clients to use our ‘local’ Windows Update Server to get updates. Close the WSUS console.
    Configure WSUS on a Windows Server 2016

With Group Policies we push settings out to our clients like laptops or desktops but you can also use policies to push settings to other (member) servers in your network.

  1. From the start menu type ‘Group’ and you will see that is automatically completes it as Group Policy Management and in the Menu Group Policy Management appears. Choose that.
    Configure Group Policies on Windows Server 2016
  2. This is how a basic GPO setup looks like when nothing is configured. In the Dashboard there is a option called ‘Implement Group Policy’
    Configure Group Policies on Windows Server 2016
  3. Open the Windows Server Essentials Dashboard and click ‘Implement Group Policy’.
    Configure Group Policies on Windows Server 2016
  4. Click Next
    Configure Group Policies on Windows Server 2016
  5. Click Next
    Configure Group Policies on Windows Server 2016
  6. Click Finish
    Configure Group Policies on Windows Server 2016
  7. Click Close and go back to Group Policy Management
    Configure Group Policies on Windows Server 2016
  8. Click Refresh
    Configure Group Policies on Windows Server 2016
  9. There we have 2 new GPO’s and one new WMI Filter. I have checked if you can change the WSE Group Policy Security Template and add “Client Side Targeting” and “Specify intranet Microsoft update service location” to this GPO. Rerunning the wizard from Dashboard does not override the custom settings so it seems a good idea to do so.
    Configure Group Policies on Windows Server 2016
  10. We add both settings as shown in the screenshot. After that close the Group Policy Management Tool.
    Configure Group Policies on Windows Server 2016
  11. Now it is time to rerun the wizard and set automatic synchronization. After you have done that start a manual synchronization to get things going. After doing that boot your Windows 10 client, run gpudate /force and then gpresult /r and check if the GPO’s are in place. Then run wuauclt /reportnow and wuauclt /updatenow to kick start Windows Update on your client and check the WSUS console if the Windows 10 client show up…and it does and it says it is a Windows 10 client. Now we have to wait and see if it starts updating.
    Configure Group Policies on Windows Server 2016

 

Join our community.

Excellent content,
great people!

Like what you see? Join us for free*

Subscribe and receive ‘how to’ and ‘best practice’ articles on server and cloud maintenance, design and troubleshooting.

  • Monthly newsletter with a summary of all new tutorials
  • Get an email as soon as a new tutorial has been published

About www.server-essentials.com 

www.server-essentials.com is founded by Mariette Knap, a Dutch Microsoft MVP. www.server-essentials.com is a community for IT Consultants and Business Owners who, themselves, take care of the IT infrastructure and Employees who do that little extra in the company to keep things running. Our forum is for discussing all things ‘IT’ and more.  Our documentation is top notch and written by and for the community.


Project Image
Contact Us
(030) 2250455

International: +31302250455

 

Concentrix BV

C. de Rijcklaan 1

3723 PM Bilthoven

The Netherlands

KvK 30202318

VAT Id 814036739B01