Disable WSUS Updates on SBS Server

We have already have a patching solution in place for our SLA customers.  Because of this we do not have a need to utilize WSUS and having 30+GB tied up on highspeed SAS disks, simply does not make any sense.  Additionally from most things I have read, uninstalling WSUS is not recommended for SBS Server.  The easiest way to reclaim the disk space & still allow SBS Monitoring to audit your patches is to simply turn off approval for Server Updates and run the clean up wizard.  This can be done from the SBS Console “Security” tab

Select Change the software update settings:

Disable WSUS Updates on SBS Server

Set both Server Updates & Client Updates to “None”

Disable WSUS Updates on SBS ServerDisable WSUS Updates on SBS Server

Set your schedule:
Disable WSUS Updates on SBS Server

Next run Windows Server Update Services from Administrative Tools:

Disable WSUS Updates on SBS Server

Select “Server Cleanup Wizard” and select Next, wait for Cleanup to run(can take some time) and click Finish one completed

Disable WSUS Updates on SBS ServerDisable WSUS Updates on SBS Server

 

About AJ McKean

Based in sunny Tauranga, New Zealand, AJ McKean is a Senior Systems Engineer in Mt Maunganui. With over 15 years of professional IT experience working in both New Zealand and the United States, he holds several certifications including MCSE(2000-2003), MCITP:Enterprise(2008), MCSA(2012), VMware VCP-DCV5.5, CompTIA A+ & is an HP Storage Architect. He is passionate about all things IT, especially virtualization, automation & cloud technologies.

6 Responses to “Disable WSUS Updates on SBS Server”

  1. Nathan A. Clark says :

    Thanks for the simple solution to this problem we have with all our remaining SBS clients.

  2. Mike Renna says :

    Thanks for the blog. But does this get windows to go to the Microsoft servers for updates? Or your RMM works independent of windows update? I’d like to be able to double check the RMM process and run windows update to see if that app feels patches are missing. Right now I am in a situation where the RMM says there’s 6 patches that are needed, but windows update says it is fully patched (an SBS 2011 standard server)

    • AJ McKean says :

      Our RMM works independently of MS/Windows Updates. Patches are authorized and downloaded to a local store folder on the server and ran from there using their utilities. That being said, when you check for updates, you should have an option to go online to check for updates (you may have to adjust your default patching GPO if this isn’t an option). This will then check against the MS Catalog and confirm

  3. Chuck says :

    Thank you for the post, AJ! I’m frankly curious why disabling/uninstalling WSUS is not recommended. I’ll have to do some more digging on that. We, too, have another solution for patching, and have been fighting 30-50GB SUS databases (and 10GB log files!) consuming lots of precious space on the system drive. Quite frustrating!

  4. Tim says :

    Is there a different way to disable the WSUS service? The SBS console crashes at the Security tab when I attempt this fix. Thank you.

Leave a Reply

Your email address will not be published. Required fields are marked *