Endpoint Services, WSUS, Configuring Downstream WSUS Servers
Windows Server Update Services (WSUS) downstream server configuration guide.
Windows Server Update Services (WSUS)
University of Illinois IT Pros leveraging Technology Services Windows Server Update Services (WSUS)
- General Information
- Replica Downstream WSUS Server
- Autonomous Downstream WSUS Server
- Server Configuration
This guide provides basic instruction on setting up autonomous or replica downstream WSUS servers. Downstream WSUS servers reduce overall off-campus bandwidth as updates are downloaded from Microsoft to the WSUS service once, and then distributed to campus downstream servers.
Replica Downstream WSUS Server
A replica downstream server uses another WSUS server as its master repository; any updates that the master server has downloaded will be available to the downstream server. The replica server:
- Mirrors update approvals, settings, computers, and groups from its parent; updates can only be approved on the upstream (master) server.
- Makes client status reports available to the master server, but does not upload them.
- Must be in the same Active Directory forest as the master to allow for full reporting.
Autonomous Downstream WSUS Server
An autonomous downstream server, like a replica server, also uses another WSUS server as its master repository, but allows for individual approvals for updates different from those of the master. The autonomous server:
- Allows flexibility in creating computer groups.
- Does not have to be in the same Active Directory forest as the master.
Configuring a Downstream WSUS Server
To configure a replica or autonomous downstream server:
- Open MMC with the Update Services snap-in.
- Connect to the server you are going to change to a downstream server.
- Click Options in the left pane.
- Click Update Source and Proxy Server.
- Click the Synchronize from another Windows Server Update Services Server radio button.
- Enter server name: WSUS.CITES.ILLINOIS.EDU (to use the EPS WSUS as the upstream master).
- Port Number: 80 or 443 (443 if you check the Use SSL when synchronizing update information box).
- To configure a replica server: check This server is a replica of the upstream server.
- Most options will now be greyed out as the server will inherit them from the master.