Software Update Service
The Kelley School of Business has implemented two Microsoft Software Update Service (WSUS) servers. Using WSUS allows the KSB to run it's own Windows Update Server and provide critical updates and service packs for faculty and staff machines running Microsoft Windows Operating Systems. WSUS support is not available for Windows 9x, Windows ME, Windows NT 4, or non-Microsoft operating systems.
Who will WSUS affect?
For now, WSUS is only available for Faculty/Staff desktops and laptops that are joined to ADS. 1st and 2nd year graduate student laptops are not joined to ADS and will not benefit from WSUS at this time.
What if a machine is already configured for Automatic Updates from Microsoft?
The group policy used to deploy WSUS overwrites the local settings for Automatic Updates and prevents users from altering the new WSUS settings.
Why not let the machine's Automatic Updates service handle the Windows Critical Updates?
Using WSUS allows Technology Operations & Services (TOS) to test critical updates and service packs and release them if/when we are ready. In conjunction with Group Policies, TOS Administrators can control when and how updates are released from a centralized location instead of having to visit every desktop machine.
What happens to machines connected to WSUS when updates become available?
Machines attached to the WSUS server check for updates every 2 hours. Once TOS has tested and approved an update, the update will be installed at 1am the following day. If required, the machine will reboot after installing the updates.
Do I have to reboot my machine or can I leave my machine on at night?
TOS encourages users to save their data and restart their machine before leaving for the evening. If a user wishes to leave their machine on overnight, it is imperative that they save their data and close all open applications. Any unsaved or “in progress” work will be lost if the WSUS updates require a reboot. Again, it is imperative that users save their data and close their open applications before leaving for the evening.
What happens if updates become available and a user turns off their machine at night?
The next time the user logs into the machine they will receive a prompt stating that updates are available and that the user has 5 minutes to hit cancel if they do not want the updates to automatically install. If a user selects cancel, the updates will install the following morning at 1am. If a user turns off the machine at night, they will receive the same message again the next morning when they log in.
Does a user have to be logged in for the updates to install?
WSUS, like the Antivirus Server, does not require the user to be logged in to to receive updates. We prefer that users reboot their machines before leaving for the night and leave the machine at the logon prompt.
Are users now unable to use the Windows Update page?
No, users still have the ability to use the Windows Update page.
Can the critical updates and service packs installed by WSUS be uninstalled?
Critical updates and service packs can be uninstalled through Add/Remove Programs.
What if a user no longer wants to receive updates via WSUS?
Users should email their computer name(s) to firstname.lastname@example.org and provide a business case reason for withdrawing from WSUS updates. The KSB Security Officer will review and respond to the request. Please keep in mind that WSUS access is granted per machine and not per username.
Users who choose to opt-out of the WSUS policy are responsible for maintaining security patches for their systems. It is critical that these workstations receive regular security patches to maintain the highest level of security for the KSB and IU network. Any system compromised due to lack of security patches is subject to a $50 per hour per technician, minimum one hour charge for technical assistance, in addition to any actions taken by UITS.