4,608 questions
The complete guide to WSUS and Configuration Manager SUP maintenance
SCCM - how to WSUS Maintenance with upstream (SQL DB) and downstream (WID DB)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 92%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Saxe
326
Reputation points
Hi,
we have 2 WSUS servers, the upstream server connects to SQL database for the domain network and one downstream server with WID database.
In SCCM you can set WSUS maintenance only at all, you can not distinguish between A and B. If i check "remove obsolete updates" in SCCM -> SUP -> WSUS maintenance SCCM tries to delete it also from the downstream server. But it doesnt make any sense in my mind? Am I wrong? Can i prevent it any way?
Just to make sure I want WSUS maintenance on the upstream server but not on the downstream server. Downstream server syncs with upstream server so no need to maintain it.
Or is it maybe better to setup downstream server with the same SQL database as the upstream server?
Thanks
Microsoft Security | Intune | Configuration Manager | Other
6 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 28.999999999999996%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIE%3C/text%3E%3C/svg%3E)
Ilia Ershov 131 Reputation points2021-10-28T07:25:22.827+00:00 -
Saxe 326 Reputation points
2021-10-28T09:52:21.133+00:00 i know it but this doesnt answer my question. Something more than just a link?
Sign in to comment -
-
Garth 5,801 Reputation points2021-10-28T09:37:19.337+00:00 What exact do you mean by upstream? Which one is the sup? Why are you using wid db?
-
Saxe 326 Reputation points
2021-10-28T09:48:01.383+00:00 primary server with WSUS and SCCM roles MP & DP & some others in domain VLAN (SQL) and another server with WSUS (WID) and SCCM roles MP & DP in VPN VLAN
VPN VLAN WSUS as downstream server which syncs from the upstream server in domain VLAN, i thought its a good idea to use WID on the VPN VLAN so i dont need another SQL instance
Sign in to comment -
-
-
Saxe 326 Reputation points
2021-10-29T11:26:20.1+00:00 Upstream == Server which is synced from
Downstream == Server which syncs from upstream serverI used WID on downstream server because no need for another SQL instance
-
Garth 5,801 Reputation points
2021-10-29T16:46:47.983+00:00 So now that https://mmsmoa.com/ is over and I'm sitting in an airport lounge. I get what an upstream server is, but what is not clear is where is the sup? Is the downstream server a secondary site or a second sup on the primary? All version of wsus can use the Sql license that comes with cm.
Base solely on your description, it is unclear to me what your environment look like.....
