locked
WSUS 2012r2 Implementation in an Enterprise Environment RRS feed

  • Question

  • We are going to install and configure WSUS with server 2012r2 but have questions on best practices for installing it in a good size enterprise network.  First, should I use the Windows Internal Database or download SQL Express for use with the WSUS server?

    Will WSUS service all the domains in a forest?  Sites with WAN links will have to have a local WSUS to minimize update traffic over the link.  What about non child domains?  Other domains in other forests that have trusts? 


    Francisco Mercado Jr.

    Friday, May 1, 2015 2:21 AM

Answers

All replies

  • Hi Dvua,

    To choose the WSUS Storage, please refer to the information below:

    1.  We recommend that you use Windows Internal Database in the following cases:
    • The organization has not already purchased and does not require a SQL Server product for any other application.
    • The organization does not require an NLB WSUS solution.
    • You intend to deploy multiple WSUS servers (for example, in branch offices). In this case, you should consider using Windows Internal Database on the secondary servers, even if you will use SQL Server for the root WSUS server. Because each WSUS server requires a separate instance of SQL Server, you will quickly experience database performance issues if only one SQL Server handles multiple WSUS servers.

    2.  We recommend that you use SQL Server with WSUS in the following cases:
    • You require an NLB WSUS solution.
    • You already have at least one instance of SQL Server installed.

    Refer to:

    Design a WSUS Storage Strategy

    To deploy the WSUS in enterprise, please go through this article depend on your scenario:

    WSUS Deployment Scenarios

    If there is anything else regarding this issue, please feel free to post back.

    Best Regards,

    Anna Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Friday, May 1, 2015 9:02 AM
  • the database performance doesn't really impact patching, it shows when you try to do reporting and literally any interaction with the WSUS console by just viewing updates/computers or performing approvals.  if you have SQL, use it, otherwise use the internal DB.  if you find internal DB is dragging you down you can always migrate the DB to a full SQL install

    it sounds like you would be deploying an upstream server with a few downstream servers at your remote sites and may even at your other domains/forests depending on far your AD trusts extend

    WSUS does support Workgroup environments as well although I'm not certain about attaching a workgroup WSUS server to an AD WSUS server

    too many downstream servers can become a management overhead so keep that in mind but also keeping in mind update distributions over multiple subnets on your network can cause unexpected performance hits if latency is too high and throughput low, bottlenecks can occur

    Friday, May 1, 2015 7:34 PM
  • In Options/Server Clean up Wizard, if "Computers not contacting the server" is Checked what is the worse that will happen if a computer does not check with the server in 30 days?  from where is it deleted?  from within the WSUS All Computer or AD as well???


    Francisco Mercado Jr.

    Tuesday, May 5, 2015 4:10 PM
  • Am 05.05.2015 schrieb dvua:

    In Options/Server Clean up Wizard, if "Computers not contacting the server" is Checked what is the worse that will happen if a computer does not check with the server in 30 days?  from where is it deleted?  from within the WSUS All Computer or AD as well???

    No, the Computerobject will only delete from WSUS. If 2 days later
    Computerobject is starting again, it will come and will visible again
    in wSUS.


    Servus
    Winfried

    Gruppenrichtlinien
    HowTos zum WSUS Package Publisher
    WSUS Package Publisher
    HowTos zum Local Update Publisher
    NNTP-Bridge für MS-Foren

    • Marked as answer by dvua Thursday, May 7, 2015 10:00 AM
    Tuesday, May 5, 2015 5:50 PM