Endpoint Services, WSUS, Configuring Downstream WSUS Servers
Systems
Windows Server Update Services (WSUS)
Affected Customers
University of Illinois IT Pros leveraging Technology Services Windows Server Update Services (WSUS)
Actions
- General Information
- Replica Downstream WSUS Server
- Autonomous Downstream WSUS Server
- Server Configuration
General Information
This guide provides basic instruction on setting up autonomous or replica downstream WSUS servers. Downstream WSUS servers reduce overall off-campus bandwidth as updates are downloaded from Microsoft to the WSUS service once, and then distributed to campus downstream servers.
Replica Downstream WSUS Server
A replica downstream server uses another WSUS server as its master repository; any updates that the master server has downloaded will be available to the downstream server. The replica server:
- Mirrors update approvals, settings, computers, and groups from its parent; updates can only be approved on the upstream (master) server.
- Makes client status reports available to the master server, but does not upload them.
- Must be in the same Active Directory forest as the master to allow for full reporting.
Autonomous Downstream WSUS Server
An autonomous downstream server, like a replica server, also uses another WSUS server as its master repository, but allows for individual approvals for updates different from those of the master. The autonomous server:
- Allows flexibility in creating computer groups.
- Does not have to be in the same Active Directory forest as the master.
Configuring a Downstream WSUS Server
To configure a replica or autonomous downstream server:
- Open MMC with the Update Services snap-in.
- Connect to the server you are going to change to a downstream server.
- Click Options in the left pane.
- Click Update Source and Proxy Server.
- Click the Synchronize from another Windows Server Update Services Server radio button.
- Enter server name: WSUS.CITES.ILLINOIS.EDU (to use the EPS WSUS as the upstream master).
- Port Number: 80 or 443 (443 if you check the Use SSL when synchronizing update information box).
- To configure a replica server: check This server is a replica of the upstream server.
- Most options will now be greyed out as the server will inherit them from the master.