Home / server / Questions / 26128
Accepted
codeape
Asked: 2009-06-16 12:05:51 +0800 CST

How do I disable WSUS for a single server?

  • 772

Scenario:

  • A few Windows 2003 servers, part of our corporate network
  • Corporate IT has set up a WSUS server.
  • But it seems Corporate IT is unable to operate the WSUS server properly. On "my" servers, I get 'unable to download updates'-messages in the event log regularly. And no patches are downloaded/installed to the servers.
  • I have admin access to the servers, since there are a few things I support myself for our branch office.

Question:

  • I want to disable my servers usage of the corporate WSUS server. I would like to configure it the "normal" way - use Microsoft's windows update.
  • How and where do I change this setting? I have no idea how corporate IT has configured the servers in the first place - maybe using group policy?
windows-update wsus

4 Answers

  1. Best Answer

    If it is set using a Group Policy, you probably cannot override the setting (that's the whole point of Group Policies), but you should be able to visit the Windows Update website and still download updates yourself, you just won't get the prompts and reminders of new updates.

    You really should open a ticket with your Corporate IT department and work with them to resolve the issue. Likely there is something not configured properly between your server and their WSUS server.

    • 7

  2. For temporarily disabling it you can do this:

    Rename or delete: 

    HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate

    Restart the wsus client

    net stop wuauserv
net start wuauserv
    • 4

  3. I just had someone do this for me. Uber easy. Just go into the roles portion of your server manager and select WSUS as a role to remove. And it ought to get rid of the app and also any updates that have been grabbed by WSUS.

    I was lucky that my updates had not installed for some reason so there was no need to dump the op and re-install. But be careful what you do...

    • 3

  4. You can create a new OU under their OU for your servers with a GPO that will override their settings. When creating the GPO look under Computer Configuration-->Policies-->Administrative Templates-->Windows Components-->Windows Update.

    Oh, and you could also use local security policy on each server to override their group policy.

    • 0