Month: March 2021

Written by #xxaxxelxx

WSUS | Hint for cloned machines.

Do sysprep.exe, but you will lose activation, licenses, maybe devices. The poor mans way: Remove the SusClientID and (if exists) AccountDomainID from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

Written by #xxaxxelxx

WSUS Database maintenance

Install ‘SQL Server Management Studio Express’ Run ‘SQL Server Management Studio Express’ as Administrator. Server is \\.\pipe\MICROSOFT##WID\tsql\query Backup your SUSDB. Check this: https://docs.microsoft.com/de-de/troubleshoot/mem/configmgr/wsus-maintenance-guide https://docs.microsoft.com/en-us/troubleshoot/mem/configmgr/wsus-maintenance-guide Short: Create a project, Create custom indexes (ONLY BEFORE YOUR FIRST REINDEXING, once in a databases lifetime), reindex (https://docs.microsoft.com/de-de/troubleshoot/mem/configmgr/reindex-the-wsus-database https://docs.microsoft.com/en-us/troubleshoot/mem/configmgr/reindex-the-wsus-database) HINT: Never distribute drivers via WSUS. Exclude them in WSUS. I […]

Written by #xxaxxelxx

WSUS CLEANUP via Powershell

$WSUS = Get-WsusServer -Name SERVERNAME -PortNumber 8530Invoke-WsusServerCleanup -UpdateServer $WSUS -CleanupObsoleteComputers -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -CleanupObsoleteUpdates -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -CleanupUnneededContentFiles -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -DeclineExpiredUpdates -VerboseInvoke-WsusServerCleanup -UpdateServer $WSUS -DeclineSupersededUpdates -Verbose

Written by #xxaxxelxx

GPO | Create a scheduled task

Create the task on a computer. Set the executional principal to ‘NT AUTHORITY\SYSTEM’. Type the string directly or search for ‘SYSTEM’ in the computers local branch. Test it locally. Export the Task as xml. Copy the xml to an accessable network share. Create a powershell script to install the task out of this xml. Example […]