Skip to main content

VUIT Windows Server Update Services (WSUS)

VUIT Windows Server Update Services (WSUS)

This service enables the Vanderbilt community to obtain security updates and service packs for your operating system, Office Suite (i.e., Word, Excel, etc.), and Windows Defender from one place.

The service is opt-in for workstations and provided as a best effort by VUIT. It is ideal for departments that do not have a Local Service Provider (LSP) or for LSP's that would like for VUIT to provide security updates.

If there is interest to push updates to servers, contact the VUIT Help Desk. VUIT will offer to implement standard policy in OU/AD for requesting LSP.

About VUIT Automated Update Service

VUIT is pleased to provide an automated update service to the Vanderbilt campus using Microsoft® Windows™ Server Update Services (WSUS). This service enables the Vanderbilt community to use Microsoft's "Automatic Update" feature, which provides critical security updates from Microsoft, including Windows Defender updates. This service may be used by Vanderbilt faculty, staff, and students on Vanderbilt-owned and personal machines to deploy the latest Microsoft product updates to Microsoft Windows 2000 with SP3, Windows Server 2000, Windows Server 2003, and Windows XP operating systems. The service is opt-in and provided as best effort.

By using WSUS in conjunction with Active Directory, Local Service Providers can fully manage the distribution of updates that are released through Microsoft Update to computers in their network.

Security patches for Windows, Internet Explorer, etc. for vulnerabilities that are considered "Critical" or "Important" by the Microsoft Security Team and are available from Windows Update will be available from the VUIT WSUS Service within 48 hours of their availability on Windows Update. During the 48 hours before the patch is available to the community, Vanderbilt beta testers will monitor their systems after the patch is applied and VUIT will monitor various industry lists for reports of that patch causing problems in other environments.

VUIT will release a patch more quickly should Microsoft release a patch which they have deemed critical enough to release ahead of their monthly deployment schedule.

VUIT WSUS will also deploy MS Office Service Packs. The policy for service pack deployment is two weeks after Microsoft releases them.

Why use VUIT Update Service and not Microsoft?

VUIT will automatically provide Office updates to you as well as the operating system updates.  There is no need to go to two different places.  You will also need the Microsoft Office install software.

VUIT has the option of delaying a security patch if reports begin to appear that the patch is causing stability problems for machines.

VUIT will provide new Windows Defender updates as they become available.

How Do I subscribe to VUIT WSUS?

If you are a single user with little to no technical support please click below for implementation instructions:

Configure Automatic Updates for a Non–Active Directory Client

If you are a Local Service Provider (LSP) and have an OU in Active Directory please click below for implementation instructions: Configure Automatic Updates by Using Group Policy

How do I unsubscribe from the VUIT WSUS

The un-registration process removes WSUS policy settings from your registry and leaves the AutoUpdate service pointing at the Microsoft site, which is the Windows default setting. This unregistration process is only valid for machines not controlled by WSUS settings set via domain group policy.

  • Step 1: Download itswsus_unregister.reg
  • Step 2: You may select Open when prompted, or run the registry file (.reg) you just downloaded by double-clicking on it. You will then be asked if you want to add the information in this .reg file to your Windows registry. Click Yes, then OK when the operation is complete.
  • Step 3: Run itswsus_autoupdate.exe OR
  • Step 3a: Restart the AutoUpdate service manually
    • Click on the Start button
    • Select Run
    • In the Open box, type services.msc
    • Click OK
    • Right-click on the Automatic Updates service, select Restart
    • Close the Services window

The AutoUpdate service should start polling the Microsoft site within ten minutes.