CTWUG WSUS

What is WSUS

WSUS (Windows Server Update Services) is the way we get all the Windows Updates onto the wug. Using this server for your updates instead of Windows Updates allows you to save on International Bandwidth. WSUS currently runs on voorvel.nOs and synchronizes every evening at 20:00 with the Microsoft Servers.

How to setup WSUS on your local PC

1. Save the following as ctwug_wsus.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="https://wsus.ctwug.za.net"
"WUStatusServer"="https://wsus.ctwug.za.net"
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="CTWUG"
"ElevateNonAdmins"=dword:00000000 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000a
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"AutoInstallMinorUpdates"=dword:00000001
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000003c
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000000f
"DetectionFrequencyEnabled"=dword:00000001
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"UseWUServer"=dword:00000001
"NoAUShutdownOption"=dword:00000000
"NoAUAsDefaultShutdownOption"=dword:00000000

2. Double click the file and click YES when asked if you want to import it

3. Read #How to Import CACert Certificates (This can be skipped, but then the https://wsus.ctwug.za.net should be replaced with http://wsus.ctwug.za.net

4. Click on Start -> Run -> wuauclt /detectnow

5. Click on Start -> Run -> wuauclt /reportnow

6. Now you wait :)

How to Import CACert Certificates

1. Goto CACert

2. Save both certificates in PEM (extension is .crt) format on your desktop

3. Click on Start -> Run -> mmc and click on OK

4. Click on File -> Add/Remove Snap-In (CTRL+M)

5. Click on Add and Select Certifictes

6. Click on Add and Select Computer Account

7. Click Next

8. Click Finish

9. Expand Certificates (Local Computer)

10. Expand Trusted Root Certification Authorities

11. Select Certificates

12. On the Menu, Click Action -> All Tasks -> Import

13. Click Next

14. Browse and Select root.crt

15. Click Next

16. Click Next

17. Click Finish

18. Repeat the steps from 12 to 17 for class3.crt

19. After both certificates have been imported you can find them here

Troubleshooting

All logging information is saved to c:\windows\WindowsUpdate.log

If you have any problems, please read the last few lines in this file. They should contain the problem.

What Updates does WSUS Mirror

• Office

1. Office 2002/XP

2. Office 2003

3. Office 2007

• Silverlight
• Visual Studio

1. Visual Studio 2005

2. Visual Studio 2008

• Windows

1. Windows 2000

2. Windows 7 Client

3. Windows XP 32Bit

4. Windows XP 64Bit

5. Windows 2003

6. Windows Vista

7. Windows 2008

• Internet Explorer

1. Internet Explorer 7

2. Internet Explorer 8