WSUS | Hint for cloned machines.

Do sysprep.exe, but you will lose activation, licenses, maybe devices. The poor mans way: Remove the SusClientID and (if exists) AccountDomainID from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

WSUS Database maintenance

Install ‘SQL Server Management Studio Express’ Run ‘SQL Server Management Studio Express’ as Administrator. Server is \\.\pipe\MICROSOFT##WID\tsql\query Backup your SUSDB. Check this: Short: Create a project, Create custom indexes (ONLY BEFORE YOUR FIRST REINDEXING, once in a databases lifetime), reindex ( HINT: Never distribute drivers via WSUS. Exclude them in WSUS. I […]

WSUS CLEANUP via Powershell

$WSUS = Get-WsusServer -Name SERVERNAME -PortNumber 8530Invoke-WsusServerCleanup -UpdateServer $WSUS -CleanupObsoleteComputers -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -CleanupObsoleteUpdates -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -CleanupUnneededContentFiles -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -DeclineExpiredUpdates -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -DeclineSupersededUpdates -Verbose

GPO | Create a scheduled task

Create the task on a computer. Set the executional principal to ‘NT AUTHORITY\SYSTEM’. Type the string directly or search for ‘SYSTEM’ in the computers local branch. Test it locally. Export the Task as xml. Copy the xml to an accessable network share. Create a powershell script to install the task out of this xml. Example […]