UD Implementation of WSUS

  1. Where – UD Virtual Cluster

  2. Who – UD Information Technologies (IT) - Managed by NSS, Supported by CS&S, for use by University owned computers located on campus or connecting while travelling via VPN.

  3. TEST Group and Monitoring
    We ask that each group participating specify one machine to point at the Immediate group.  This group will receive all releases (updates, patches, service packs/rollups, etc.) immediately when distributed by Microsoft.

  4. Client Side Targeting
    Each unit participating must have an OU and use client-side targeting. This does not mean that the unit needs to use the OU or that machines using this service need to be joined to the win.udel.edu domain or any other. This is mainly for accounting purposes and allows the clients to be grouped together for reporting reasons.

  5. Classification of releases: WSUS releases fall into the following categories:

    • Critical:
      • All definition updates (Defender, etc.)
      • Security updates of critical or Important Level
    • Moderate:
      • Security Updates (Moderate, Low, Unspecified),
      • Critical Updates (non-security)
      • Applications
      • Feature Packs
      • Tools, Other Updates
    • Maintenance:
      • Service Packs
      • Update Rollups
  6. Schedule:
    WSUS updates will be available on one of four schedules:

  • Immediate:
    • All release groups immediately approved (released to clients)
  • Rapid:
    • All release groups EXCEPT maintenance immediately released
    • Maintenance released with 30 day lag
  • Delayed:
    • Critical Released immediately
    • Moderate released with 7 day lag
    • Maintenance release with 30 day lag
  • Lab Based:
    • Critical Released immediately
    • Moderate released with 7 day lag
    • Maintenance released end of each semester and before fall semester.
Note that clients can be temporarily moved to the Immediate approval group to “catch up” on all releases. Also note that releases become available as optional installs to clients on a different schedule.
​​
WSUS Update Schedule

Release Group

 

Immediate

Rapid

Delayed

Lab Based

Definition Updates

Install

0

0

0

0

Security Updates

Critical

0

0

0

0

Important

0

0

0

0

Moderate

0

0

7

7

Low

0

0

7

7

Unspecified

0

0

7

7

Updates (All, Including Critical), Tools, Feature Packs

Install

0

0

7

7

OPTIONAL

 

 

1

1

Applications

Install

0

0

7

7

Service Packs,    Update Rollups

Install

0

30

30

Sched

OPTIONAL

 

15

15

30

Note: Two-tiered release
Updates will be released in two tiers.  Some updates will be released as optional (client can install them if selected under the “optional updates heading) before they are released as Install (selected by default, and will be installed automatically if client is set to 4 - Auto download and schedule the install. (See the configuration notes on the Using WSUS at UD page.) If a release is set to install immediately, it will never be set as OPTIONAL.

 

Details

Article ID: 378
Created
Fri 7/19/19 1:19 PM
Modified
Wed 3/4/20 9:32 AM