WSUS deployment without AD
Recently, one of my customer wanted WSUS deployment without AD.
https://www.microsoft.com/windowsserversystem/updateservices/downloads/WSUS.mspx (Deployment Guides)
Filename: Deploying Microsoft Windows Server Update Services.doc
WSUS deployment with AD, it's very simple. Just follow the steps of document.
WSUS deployment without AD, it's a little bit confusing. There wasn't enough guidance.
In a non-Active Directory environment, you can configure Automatic Updates by using any of the following methods:
· Using Group Policy Object Editor and editing the Local Group Policy object
· Editing the registry directly by using the registry editor (Regedit.exe)
>> I'm going to explain this.
The registry entries for the Automatic Update configuration options are located in the following subkey:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
1) How to download, and install at a designated time (Refer to the above link to get a deployment guideline: Page72)
Entry Name |
Value Range and Meanings |
Data Type |
|---|---|---|
AUOptions |
Range = 2|3|4|5 2 = Notify before download. 3 = Automatically download and notify of installation. 4 = Automatic download and scheduled installation. (Only valid if values exist for ScheduledInstallDay and ScheduledInstallTime.) 5 = Automatic Updates is required, but end users can configure it. |
Reg_DWORD |
2) Reboot system after installation (Page 74)
ScheduledInstallDay |
Range = 0|1|2|3|4|5|6|7 0 = Every day. 1 through 7 = The days of the week from Sunday (1) to Saturday (7). (Only valid if AUOptions equals 4.) |
Reg_DWORD |
ScheduledInstallTime |
Range = n; where n = the time of day in 24-hour format (0-23). |
Reg_DWORD |
UseWUServer |
The WUServer value is not respected unless this key is set. |
Reg_DWORD |