Windows Server

Important Areas to Master on WSUS (Installed and not applicable, Install 1/4, and Installed / Not applicable 100)

Windows Server Update Services (WSUS): WSUS previously known as Software Update Services (SUS), is a computer program and network service developed by Microsoft Corporation that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers in a corporate environment.

For more articles I have written, see the following hyperlinks below
Configuring WSUS Email Notification to Work With Office365
How to setup and configure Windows server update services (WSUS)
– Targeting WSUS Client with the Registry keys: How to configure WSUS Clients to get Updates from the WSUS server using Registry settings
How to apply Windows Updates from WSUS to the server using AWS RunCommand
– How to Configure SSL between WSUS servers (Upstream and Downstream Servers)
– Handy WSUS Commands – Windows Server Update Services Commands, WAUACLT, PowerShell and USOClient
– How to Start, Stop and Restart Windows Server Update Services (WSUS) via PowerShell and CMD
– Windows Server Update Services: Windows 2016 Servers does not show up on WSUS console,
WSUS clients appear and disappear from the WSUS Update Services console

Installed and not applicable -> means updates that are applicable
1. That particular patch is for Windows Server 2012 – are all of your systems that report into your

WSUS Windows Server 2012?  If not, then that patch will show up as installed/not applicable because the patch doesn’t apply to those systems.

Explanation. if you have four servers reporting to WSUS which are 2 windows 2012 and 2 windows 2008 servers
– MS.Netframeork Update for server 2012 — will show up as 50 installed /not applicable Each of those servers (meaning 50% of the total computers reporting to WSUS need this)

– This also applies to 2008 server. The percentage of windows 2008 servers needing this (reporting to wsus will show up)

Install 1/4 WSUS meaning  à Groups configured for install (The (1/4) means you have approved it for one of your four targets groups.)

In the WSUS Admin Console, we find that under the column “Approval”, some of the updates have a value like “Install (1/3)

– The parenthetical numbers are documenting how many groups are configured for Install (All computer groups/Unassigned group/ Test Server Group) etc.

In the first case, one of three groups has the update approved for install. In the second case, the update is approved for all computers and is inherited to all groups.

This can be seen from the update status which shows the computer installed and not applicable by clicking on the link

Installed / Not applicable 100
This means the updates is not applicable to any client whatsoever.

Note: Here is a script to delete or decline updates from wsus

Notify of

Inline Feedbacks
View all comments
Would love your thoughts, please comment.x