Windows Server

Areas to Master on WSUS: Key Install Stats (1/4 – 100)

WSUS updates

Exploring the crucial “Areas to Master on WSUS” is essential. Formerly known as Software Update Services (SUS), WSUS, developed by Microsoft, empowers administrators to manage update distribution in a corporate computer network efficiently.

For more articles I have written, see the following hyperlinks below
Configuring WSUS Email Notification to Work With Office365
How to setup and configure Windows server update services (WSUS)
– Targeting WSUS Client with the Registry keys: How to configure WSUS Clients to get Updates from the WSUS server using Registry settings
How to apply Windows Updates from WSUS to the server using AWS RunCommand
– How to Configure SSL between WSUS servers (Upstream and Downstream Servers)
– Handy WSUS Commands – Windows Server Update Services Commands, WAUACLT, PowerShell and USOClient
– How to Start, Stop and Restart Windows Server Update Services (WSUS) via PowerShell and CMD
– Windows Server Update Services: Windows 2016 Servers does not show up on WSUS console,
WSUS clients appear and disappear from the WSUS Update Services console

Understanding Update Applicability and Installation

Installed and not applicable -> means updates that are applicable
1. That particular patch is for Windows Server 2012 – are all of your systems that report into your

Looking for Areas to Master on WSUS? If your server is Windows Server 2012, patches might appear as installed/not applicable, as they’re not meant for those systems.

Explanation. if you have four servers reporting to WSUS which are 2 windows 2012 and 2 windows 2008 servers
– MS.Netframeork Update for server 2012 — will show up as 50 installed /not applicable Each of those servers (meaning 50% of the total computers reporting to WSUS need this)

– This also applies to 2008 server. The percentage of windows 2008 servers needing this (reporting to wsus will show up)

Install 1/4 WSUS meaning  à Groups configured for install (The (1/4) means you have approved it for one of your four targets groups.)

Exploring the WSUS Admin Console, we discover that under the “Approval” column, certain updates display as “Install (1/3)”. These are key Areas to Master on WSUS for effective update management.

– The parenthetical numbers are documenting how many groups are configured for Install (All computer groups/Unassigned group/ Test Server Group) etc.

In the first case, one of three groups has the update approved for install. In the second case, the update is approved for all computers and is inherited to all groups.

This can be seen from the update status which shows the computer installed and not applicable by clicking on the link

Installed / Not applicable 100
This means the updates is not applicable to any client whatsoever.

Note: Here is a script to delete or decline updates from wsus

Notify of

Inline Feedbacks
View all comments
Would love your thoughts, please comment.x