ITS and UVa logos for printed output

ITS Windows Services

Critical Update Service

What is the ITS Windows Critical Update Service?

The Windows Critical Update Service (also known as WSUS) makes it easy for department LSPs to keep up with applying necessary maintenance updates ("patches") on Windows machines. Using a Microsoft technology called Windows Software Update Server (WSUS), ITS downloads and tests patches, then distributes them automatically to machines that utilize the service. If you are responsible for multiple Windows computers, using the ITS Windows Critical Update Service can relieve you of the chore of maintaining each machine individually and ensure that all are as up-to-date as possible.

WSUS works with all currently supported Microsoft Business software and currently includes 2008 Server, 2012 Server, Office 2010 and 2012, and Windows workstation (Vista, 7, 8 and 8.1)

Important Note: ITS delays the release of the monthly updates by one week because Microsoft sometimes releases updates which can cause issues with both third-party and Microsoft applications. During this lag period, ITS monitors industry news groups for reports of problem updates and these are not released to the WSUS system.

What is WSUS?

WSUS is Microsoft Windows Software Update Server which is designed to automate the process of distributing Microsoft Windows operating system and most Office patches.

Please note that Service Packs and new versions of applications are not released through WSUS. These updates are not released due to their size and complexity. They need to be manually installed on each machine by the user or LSP. These updates include:

  • Windows Operating System Service Packs
  • Office Service Packs
  • New Versions of Internet Explorer
  • New versions of the .NET Framework

How do I join WSUS?

Send an email to ITS Enterprise Storage and Computing Platforms with your machine name. Your computer must be in the Eservices domain.

Note: You can find your machine name by clicking on Start | Settings | Control Panel. Open the System applet, and click on the Computer Name tab. If your computer is not part of the Eservices domain, you may request it be joined to the domain (restrictions apply).

WSUS Behavior

Once joined to the WSUS system, the following occurs:

  • The Automatic Updates applet in Control Panel displays "You receive updates: Managed by your system administrator". The user can still manually check for updates by selecting "check online for updates from Microsoft Update".
  • The user may see the automatic updates icon appear in the system tray.
  • Patches will be automatically installed at 3:00 AM the following morning if the machine is powered on overnight (recommended).
  • If the machine was off at 3:00 AM, the patches will be automatically installed upon next logon. The user will be prompted to reboot if necessary.

  Page Updated: Monday 2017-05-08 14:34:30 EDT