WSUS Configuration - Automatic

The attached PowerShell script (see below) installs and configures WSUS and IIS on a Windows 2012 R2 or later server with the necessary configuration (if POC, we recommend Windows 2016 or 2019).  If you prefer to do this manually, please see this article. 

Pre-requisites

• Windows Server 2012+ with recommended sizing.
• PowerShell 4.0+ installed with PowerShell execution policy enabled
• Run as administrator in PowerShell ISE.
• Internet connectivity (minimum requirement: these Microsoft URLs)

Three Default Versions of Scripts (linked to the script)

• Servers + Workstations + Laptops
  • Windows 7 - 10
  • Windows Server 2008 - 2019
  • SQL Server 2008 - 2016
  • Includes Drivers
• Windows 10 Only
  • Windows 10
  • Includes Drivers
• Windows Server + SQL Server Only
  • Windows Server 2008 - 2019
  • SQL Server 2008 - 2016
  • Includes Drivers

Note: If you want to remove products, please edit the script before running.

The script will do an initial configuration of WSUS including

• Set sync from Microsoft Update
• Set updates language to English
• Set the WSUS Products to Sync (edit in the script if required)
• Set the WSUS Categories to Sync (edit in the script if required)
• Enable scheduled WSUS sync
• Disable IPV6

Notes

• You have the option to use WID, or an existing SQL Server.  BY DEFAULT: -WID is selected.
• Additional variables can be configured in the script itself
• Windows OS Media may be needed if WS is unable to find .Net Framework 3.5 online.
• Report Viewer 2012 is also optionally installed, it is required to view WSUS reports.
  BY DEFAULT: True
• If a WSUS replica is involved, see this article.

Next Step

• Endpoint and JetPatch Configuration for WSUS