none
Stopping WSUS on W2K8 domain controllers

답변

  • according to following threads, completely removing WSUS involves reboot

    http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/f447e7d6-7007-4eb6-b38b-90f92525e092

    This thread only applies to FORCED uninstallations of WSUS from an unhealthy server. I do not believe this article applies to your scenario.

    http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/97ba6745-7db0-48c7-9a9a-d0540c8afc30

    I would ignore this article. The poster corrupted their own installation to begin with and the purpose of that thread was to help them fix the ensuing mess that was made.

    and could corrupt registry

    In the 8+ years I have been working with WSUS, I have never seen an uninstallation corrupt the registry, although there is a sometimes-glitch that fails to remove the WSUS key from the SYSTEM hive. This is documented in the forced-removal procedure in your first link.

    (I also heard a rumor that WSUS shares same database engine as AD).

    This is correct. WSUS uses the Windows Internal Database (WID). Some components of Active Directory use the same instance of the WID.

    These are

    • Rights Management Services,
    • Federation Services,
    • UDDI Services, and
    • Windows System Resource Manager.

    If you do not have these services installed it is not a concern.

    However, this is also why the WSUS uninstaller does not remove the Windows Internal Database and it must be removed independently.

    So I am tending to stop WSUS related services on the domain controllers and not using it. Can anyone share your experience/knowledge of how to stop/disable WSUS on a W2K8R2 domain controller?

    This is certainly a viable option rather than attempting to uninstall WSUS (or if you wish to defer the uninstallation of WSUS to another time).

    The only thing you need to do is STOP the Update Services service and set it to DISABLED.

    If the WID is not being used by any other services, you can also STOP and DISABLE the Windows Internal Database.

    If IIS is not being used by any other services, you can also STOP and DISABLE the World Wide Web Publishing Service and the IIS Admin Service.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • 답변으로 표시됨 KungfuPanda2 2013년 3월 21일 목요일 오후 2:55
    2013년 3월 21일 목요일 오전 12:52

모든 응답

  • according to following threads, completely removing WSUS involves reboot

    http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/f447e7d6-7007-4eb6-b38b-90f92525e092

    This thread only applies to FORCED uninstallations of WSUS from an unhealthy server. I do not believe this article applies to your scenario.

    http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/97ba6745-7db0-48c7-9a9a-d0540c8afc30

    I would ignore this article. The poster corrupted their own installation to begin with and the purpose of that thread was to help them fix the ensuing mess that was made.

    and could corrupt registry

    In the 8+ years I have been working with WSUS, I have never seen an uninstallation corrupt the registry, although there is a sometimes-glitch that fails to remove the WSUS key from the SYSTEM hive. This is documented in the forced-removal procedure in your first link.

    (I also heard a rumor that WSUS shares same database engine as AD).

    This is correct. WSUS uses the Windows Internal Database (WID). Some components of Active Directory use the same instance of the WID.

    These are

    • Rights Management Services,
    • Federation Services,
    • UDDI Services, and
    • Windows System Resource Manager.

    If you do not have these services installed it is not a concern.

    However, this is also why the WSUS uninstaller does not remove the Windows Internal Database and it must be removed independently.

    So I am tending to stop WSUS related services on the domain controllers and not using it. Can anyone share your experience/knowledge of how to stop/disable WSUS on a W2K8R2 domain controller?

    This is certainly a viable option rather than attempting to uninstall WSUS (or if you wish to defer the uninstallation of WSUS to another time).

    The only thing you need to do is STOP the Update Services service and set it to DISABLED.

    If the WID is not being used by any other services, you can also STOP and DISABLE the Windows Internal Database.

    If IIS is not being used by any other services, you can also STOP and DISABLE the World Wide Web Publishing Service and the IIS Admin Service.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • 답변으로 표시됨 KungfuPanda2 2013년 3월 21일 목요일 오후 2:55
    2013년 3월 21일 목요일 오전 12:52
  • Hi Lawrence , Thanks for your responding. I will stop Update Services and set it to Disabled. WWW publishing service is installed automatically with DCPromo and I will leave it untouched.


    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    2013년 3월 21일 목요일 오후 3:06