Windows Server 2025 WSUS role installed (AZURE PORTAL)
Local Elevator by Kevin MacLeod is licensed under a Creative Commons Attribution 4.0 license. https://creativecommons.org/licenses/...
――――
Kool Kats by Kevin MacLeod is licensed under a Creative Commons Attribution 4.0 license. https://creativecommons.org/licenses/...
Install the WSUS Role
Option A: GUI (Server Manager)
1. Open Server Manager
2. Click Add Roles and Features
3. Role-based installation
4. Select your server
5. Check Windows Server Update Services
6. When prompted, add required features
7. On Role Services, select:
○ ✅ WSUS Services
○ ✅ WID Database (or SQL if you prefer)
8. Choose a content directory (e.g. D:\WSUS)
9. Click Install
⚠️ Don’t skip the post-install step
Initial WSUS Configuration
1. Open WSUS Console
2. Launch the Configuration Wizard
3. Choose:
○ Synchronize from Microsoft Update
○ Languages → only the ones you need
○ Products (e.g. Windows 10, Windows 11, Server 2019/2022)
○ Classifications:
§ Critical Updates
§ Security Updates
§ Updates (optional)
4. Set sync schedule (daily is typical)
5. Finish and run first sync (this can take a while ⏳)
Create Computer Groups
In WSUS Console:
• Computers → All Computers → Add groups like:
○ Test
○ Production
○ Servers
You’ll target these with GPO.
5. Configure Group Policy (Clients → WSUS)
On a Domain Controller:
1. Open Group Policy Management
2. Create a new GPO (e.g. WSUS Policy)
3. Edit it:
Path
Computer Configuration
└ Administrative Templates
└ Windows Components
└ Windows Update
Key Settings
Enable and configure:
• Specify intranet Microsoft update service location
**NOTE THIS IS A HOMELAB ** In the real world, you want to install WSUS on a dedicated server- NOT ON DC******