what should i do to own a standalone WSUS server

Aries The Realm 21 Reputation points
2024-02-29T06:45:42.8933333+00:00

I recently build a desktop and run Server2022 Standard(10.0.20348) for WSUS, most things configured for download W11 drivers and patches for test, about 1.7TB total. The problem is, when i disconnect the server and put it in my private network, WSUS does not respond correctly, control panel only shows a windows client is visiting for update, but wrong windows versions and no ip address, the service does not reply any update resource for client update. If i keep the WSUS server on public network and update client from this WSUS server, it does reply patches for update, but no drivers. What should i exacly do to build a PERFERCT WSUS SERVER in my private network just like microsoft does to provide update patches and drivers & Firmware update, thank you. Hardware: 13490F TUF B660M 32GB DDR4 ×4 1TB PCIe4.0 NVME 10TB EXOS SATA 报告

产品

产品分类

概述

更新 所有更新

计算机 没有状态的计算机

自动审批 高级

自动审批 规则

Windows for business | Windows Server | User experience | Other
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

Accepted answer
  1. Adam J. Marshall 10,356 Reputation points MVP
    2024-03-01T22:19:22.8566667+00:00

    If this is for a disconnected WSUS server, you need to follow

    https://learn.microsoft.com/en-us/mem/configmgr/sum/get-started/synchronize-software-updates-disconnected

    and it requires 2 WSUS servers - 1 Online and 1 in the Disconnected state.

    Also, review my guide

    https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

    Part 4 deals with the policies and part 5 is the GPOs. I'm not sure if your private is using GPOs because you mention it's a standalone WSUS - so is that workgroup or domain joined? If workgroup, then you will configure 1 client through local group policy, and then export/import the registry settings for

    'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate'
    

    and import them on each individual machine. If your machines are still showing up incorrectlyIs it possible to update the BIOS on any of them to test if that's the issue?

    https://www.ajtek.ca/wsus/are-your-computers-to-blame-for-the-wsus-mmc-console-crashing/

    If they are all connecting but only 1 is showing up, you may have an issue with a duplicate WsusClientId which can be solved by the client side script:

    https://www.ajtek.ca/wsus/client-machines-not-reporting-to-wsus-properly/


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.