Synchronize Automatically=$true Write-Verbose "Set synchronization scheduled for midnight each night" -Verbose $subscription.Synchronize Automatically Time Of Day= (New-Time Span -Hours 0) $subscription. Total Items) This is how it looks if you run it manually: The Power Shell script will install and configure WSUS for Windows Server 2016 only and all of it’s classifications. Get Updates($updatescope ) foreach ($u1 in $u ) write-host Total Declined Updates: $count trap # EOF By running the above script you basically tell WSUS that you don’t want to download 44 updates that has already been declined.Since originally writing the above, the world has seen a vast uptake in Windows Updates being the answer to security problems. Don’t be tempted to go through selecting everything you want to patch. Even if you wanted to, your’ll notice the lack of certain Products.. Now we’ve confirmed SCCM and WSUS are best buds and happy to communicate to each other, lets take another look at those Products; Navigate to This will allow a much smaller cumulative update package to be deployed to your clients. Successful sync of WSUS server: Now to process and sync each individual update.For this reason, i’m revising this statement and advise you run your sync on Patch Tuesday, the Second Tuesday of the month. Once you’re happy with your final configuration changes (although you can of course change them again later).. Once the Sync is complete, you can return to Lo and behold, all our synchronised updates.. In Part II I’ll cover actually downloading and deploying the updates via ADR’s & Baselines, with notes on Client Settings, Maintenance Windows, Group Policy and more.Windows 2016 Server Core is a great choice for hosting your Windows Server Update Services (WSUS).In this post I’m going to show you how to install, configure and decline superseded updates which will save you losts of time and disk space.
I’ve done this a few times now over the years, and this never fails..
In Part I, I’ll take you through configuring the required Server Roles & Features, WSUS Installation and Configuration, IIS settings, Folder Permissions and linking it all up into SCCM.
In Part II, I’ll cover actually deploying the updates via ADR’s & Baselines.
Finally, now all the ground work is laid, lets setup SCCM. Assuming you are installing onto a server of at least 2012 and up (if not, why not!? Here you can also select to use SSL, and or Internet/Intranet.
Unless you have specific requirements, leave default and click I personally like to run my Production site’s a few weeks behind ‘Patch Tuesday’.