Windows Small Business Server 2011 installation and configuration – Part 15 Configuring “Software update settings”

Go directly to SBS 2011 index file. With links to all articles from this serie.

After we have finished with Part 14 Configuring “Add a new report” we go to the security page of the SBS console and choose for the updates tab.

Here you see an overview of the windows updates if there are updates pending for approval or errors you can see them over here. Also By default Optional Updates are not installed automatically.

Right click an update and choose if you want to deploy or decline the selected update.

If you choose approve you get this warning message, to continue click OK.

And another message that it could take 4 till 24 hours before the update will be deployed to the computers on your network.

After you approved or declined all updates we are going to take a look on the software update settings. On the right taskbar choose “Change the software update settings”

On the Server Updates part, choose the update level you would set for your servers. Think carefully before you set this setting to high and approve every update automatically. If it may go wrong it concerns your server.

On the Client Updates part, you choose the same setting as on server updates but this time for client computers.

On the Schedule part you choose separate for server and client if you would install the updates automatic during a schedule or only notify the new updates are available.
Note!! Is you choose for automatic installation and an update requires a restart the client or server will automatically restart at that time. So think twice before you set this for a server computer.

On the Included Computer part, you can add or remove if a server or client computer must be part of the software update group. If you have some very important client computers that may never restart automatically. You can select the client computer and choose Modify…

And change the update group, so if you leave the settings for server not to automatically install and restart change the Update Group to the Server Computers. The selected client will now perform updates according to the Server Computers settings.

Go back to Part 14 Configuring “Add a new report”
Continue to Part 16 Configuring “Configure a virtual private network (VPN)”

Posted in Blog, Howto, SBS 2011 by ronnypot at March 10th, 2011.
Tags: , , ,

6 Responses to “Windows Small Business Server 2011 installation and configuration – Part 15 Configuring “Software update settings””

  1. Andy says:

    Hello Ronnypot,

    I have a question about the updates: the optional updates are indeed not automatically installed but is there a way to install them anyway?

    In the options of WSUS I’ve changed the default approval rule (under automatic approvals) to the following selected items:

    *critical updates
    *definition updates
    *security updates
    *update rollups

    … but still the optional updates are not automatically installed…

    Any ideas how to let them automatically install?



    • ronnypot says:

      Hi Andy,

      You have changed the settings as described above in this blog post for Server Updates to High and the schedule for server to Install the updates according this schedule?

      You won’t need to change anything within WSUS, changing the settings within the SBS console will be enough.

      • Andy says:

        Hi Ronny,

        thanks for your answer.
        I indeed selected high-update level for the server and install (with reboot) according this schedule… but still the optional updates don’t get approved…

        Any ideas?

        • ronnypot says:

          It might be that the updates that were there you need to manual approve and all new updates will be automatically be approved.

          I have to say that I never would configure my server to automatical install updates and certainly not update rollups and service packs. So I never tried this setting for a server.

Leave a Reply

Sharing Buttons by Linksku