locked
WSUS bandwith problem RRS feed

  • Question

  • We have a bandwidth issue here at work and we cannot download updates during the day. How can I force my WSUS server to download the updates when we are not here?

    As soon as I approve updates, the server immediately starts to download the updates, and this cannot happen.

    What I try to understand is, if I still do not design the gpo that specifies in the workstations when the updates should be downloaded, why is it that when the updates are just approved they are downloaded to the pcs generating these inconveniences in the bandwidth?

     

    In our company we have branches with small links, and it is important to be able to make sure that the download of patches is outside of working hours.

    Thankful for your time and your answer.

    Tuesday, October 2, 2018 4:36 AM

Answers

All replies

  • Hi,

    In the WSUS console, we can set the deadline for the approval in the automatic approvals:



    Besides, we should set the domain GPO to configure automatic updates:

     

    Best regards,
    Johnson
    =====================
    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
    • Marked as answer by Niponcito Tuesday, October 9, 2018 11:49 PM
    Tuesday, October 2, 2018 7:36 AM
  • Am 02.10.2018 schrieb Niponcito:

    We have a bandwidth issue here at work and we cannot download updates during the day. How can I force my WSUS server to download the updates when we are not here?

    You can configure BITS on your WSUS.
    https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127359
    At Night you can give BITS all Bandwith, other Time slowly.

    A have a german HowTo:
    https://wsus.de/de/HowTo/Background-Intelligent-Transfer-Services-BITS
    May it help.

    Winfried


    WSUS Package Publisher:
    https://github.com/DCourtel/Wsus_Package_Publisher
    http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx
    http://www.wsuswiki.com/Home
    GP-PACK - PRIVACY AND TELEMETRIE: http://www.gp-pack.com/

    • Marked as answer by Niponcito Tuesday, October 9, 2018 11:50 PM
    Tuesday, October 2, 2018 8:29 AM
  • Hello! Thank you very much for your answer. This means that if I set the deadline so that it occurs at dawn, should not the download situation occur during working hours? On the other hand, if users forget to leave their workstation powered, the next day when they start the workday, at that moment the download will occur? Finally, the option to set a minimum value to the bit parameter in the PCs to force that there is no consumption during the workday, did you have the experience of testing it? Thanks again!
    Tuesday, October 2, 2018 2:11 PM
  • Hello! Thank you very much for your answer. This has to be applied in the gpo of the workstations that are in the remote branches, right? In the wsus proper does not apply?
    Tuesday, October 2, 2018 2:19 PM
  • Am 02.10.2018 schrieb Niponcito:

    Hello! Thank you very much for your answer. This has to be applied in the gpo of the workstations that are in the remote branches, right? In the wsus proper does not apply?

    Yes, for the WSUS on your Sites. Or for the Clients on your Sites. But
    before you must tell your Clients to use the BITS. You can do this
    with GPO: https://gpsearch.azurewebsites.net/#11083 Set Download Mode
    to 100, after this your Clients will use BITS.

    Winfried


    WSUS Package Publisher:
    https://github.com/DCourtel/Wsus_Package_Publisher
    http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx
    http://www.wsuswiki.com/Home
    GP-PACK - PRIVACY AND TELEMETRIE: http://www.gp-pack.com/

    • Marked as answer by Niponcito Tuesday, October 9, 2018 11:50 PM
    Tuesday, October 2, 2018 5:26 PM
  • Hello,

    My experience is that, set your WSUS auto sync with WU outside the daytime (for example, at 1:00 AM), and then set auto approval rules. These rules will run after WSUS synchronization and then download the updates.

    Best Regards,
    Ray

       

    Please remember to mark the replies as answers if they help.

    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Niponcito Tuesday, October 9, 2018 11:50 PM
    Wednesday, October 3, 2018 2:55 AM
  • Hello,
     
    I am reviewing old cases. Does your issue been solved or is there any update? Please feel free to feedback.
     
    Best Regards,
    Ray

    Please remember to mark the replies as answers if they help.

    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 8, 2018 1:22 AM
  • Hello ray. I was reading all weekend taking into account the multiple combinations of configurations that can be carried out, added to that in our company the environment is very complex and it is not easy to conform to all employees.

     

    Anyway, I think I have found the ideal combination for our Company, and I have applied it and I hope tomorrow, Monday, to have concrete results.

     

    If it really works, I will share here the configuration that I applied, which will be very useful for many people.

    Monday, October 8, 2018 2:36 AM
  • What you're looking for is to Limit bandwidth used by BITS during the day and applying it to your WSUS Server.

    Follow the guide here: https://community.spiceworks.com/how_to/133819-use-gpo-to-limit-wsus-downloads-during-the-day

    This should get you working the way you want (downloading  the updates at night, trickling in during the day).


    Adam Marshall, MCSE: Security
    https://www.ajtek.ca
    Microsoft MVP - Windows and Devices for IT

    • Marked as answer by Niponcito Tuesday, October 9, 2018 11:50 PM
    Tuesday, October 9, 2018 1:38 AM