WSUS Client Configuration

The following instructions outline how to configure settings for deleting and adding, manually configuring, and forcing Automatic Updates, and are inclusive of both Penn State’s WSUS and Microsoft’s WSUS. It should be emphasized that those who are planning to leave/are no longer affiliated with the University must revert to Microsoft’s WSUS settings.


Adding Automatic Updates

For Windows computers operating on a Penn State network, this will activate Windows Automatic Updates and change the settings to point to Penn State’s WSUS server for all of the Microsoft Windows® updates, patches, and service packs. This Registry Key file is only meant to be used on clients that are not part of the ITS-managed WINAD service at Penn State.

psu-addwsus.reg

Specifically, this script adds the following registry keys that contain the address of Penn State’s WSUS server along with other settings related to Automatic Updates.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://windowsupdate.its.psu.edu"
"WUStatusServer"="http://windowsupdate.its.psu.edu"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUState"=dword:00000002
"LastWaitTimeout"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000003
"UseWUServer"=dword:00000001

Deleting Automatic Update Settings

Once you are no longer affiliated with the University (or are planning to leave), your Windows computer should no longer point to Penn State’s WSUS for automatic updates to your system; rather, it should refer to Microsoft’s Update Service. As such, your computer settings will need to revert to the factory default settings. The following Registry Key file restores the Automatic Update settings to use Microsoft’s site for updates.

psu-removewsus.reg

Specifically, this file removes the following registry keys that contain the address of Penn State’s WSUS server along with other settings related to Automatic Updates.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\AUOptions]

Manually Activating & Configuring Automatic Updates In Windows

All computers should use the WSUS for important security reasons. If you do not use Penn State’s WSUS, follow these instructions to activate the WSUS on your own computer. The automatic download time can be set for any time. If you set up Automatic Updates to notify you, or if you forget to leave your computer on, you will see a notification balloon. Click the notification balloon to review and install the updates, and make sure to click the balloon to install new updates.

If you have been using Penn State’s WSUS, but are leaving/planning to leave the University, it is recommended that you follow the procedure/run the script noted below to remove Penn State’s WSUS settings.

Windows Vista

  1. Log in to your computer as Administrator.
  2. Click Start, point to All Programs and choose Windows Update.
  3. On the left-side menu, click Change Settings.
  4. Click the radio button for Install updates automatically.
  5. Click OK.

Windows XP

  1.  Log in to your computer as Administrator.
  2. Click Start, point to Settings, and then click Control Panel.
  3. Click Performance and Maintenance.
    NOTE: If the Performance and Maintenance category is not visible, click Switch to Category View.
  4. Click System.
  5. Click Automatic Updates and then choose Keep my computer up to date.

Windows 2000

  1. Log in to your computer as Administrator.
  2. Click Start, point to Settings, and then click Control Panel.
  3. Double click Automatic Update.
  4. Click Automatic Updates and then choose Keep my computer up to date.

Machines in the Access Domain

For machines in the access domain, OU or Child domain administrators have the option of setting the policy in bulk across all machines they are responsible for.  There is a group policy object called PSU-Windows Update (WSUS) that can either be linked directly or copied if you want to customize the policy.


Manual Updates

These instructions apply to all Windows operating systems.

  1. Go to the Windows Update Web site at http://windowsupdate.microsoft.com. You must use Internet Explorer as your browser.
  2. Click Scan for Updates. Windows Update will scan your computer and display a pre-selected list of critical updates, including security updates and service packs.
  3. Under Pick updates to install, click Critical Updates and Service Packs. Windows Update then creates a list of the updates appropriate for your computer. Critical updates are automatically selected for download.
  4. Click Review and install updates.
  5. Select Updates and then click Install Now. You might need to restart your computer after installing the updates.