WSUS Check

Microsoft's Windows Server Update Services (WSUS) is a free patch management tool that enables system administrators to deploy Microsoft product updates across their organization from a centralized source, the WSUS server.

The WSUS server synchronizes with an update repository, either Microsoft Update or another WSUS server, to retrieve updates in accordance with the administrator specified product, product families and update types (i.e. Critical or Security Updates).

Update deployment can be setup in two ways, either the system administrator must approve all updates or WSUS can be configured to approve certain classes of update automatically.

Whichever method is chosen, once an update is selected it can be downloaded to the WSUS server and from there pushed out across the organization.

The WSUS Check queries the WSUS database for the last synchronization information and reports this back to N-sight RMM, along with the number of critical updates that have not yet installed successfully on all computers. As such this Check is only available on the WSUS server.

Add

  1. On the All Devices view North-pane, select the device
  2. Go to the Checks tab
  3. Click Add Check
  4. Choose Add DSC > WSUS Check
  5. Click Enable WSUS Check and configure the Alert when exceeding thresholds
  6. To run an Automated Task when the Check fails choose Assign a Task after creating the Check
  7. OK to save and apply
  8. Where Assign a Task after creating the Check is selected:
    1. Select the script
    2. Click Next to configure
  9. Enter the Command Line parameters (if required)
  10. Set a Script timeout in the range 1 - 3600 seconds (default 120 seconds)
  11. Click Finish to save and apply

Edit

  1. On the All Devices view North-pane, select the device
  2. Go to the Checks tab
  3. Select the target WSUS Check
  4. From the Check drop-down
  5. Click Edit Check (also available from the Check's right-click menu)
  6. Configure the settings
  7. Click OK to save and apply

Delete

  1. On the All Devices viewNorth-pane, select the device
  2. Go to the Checks tab
  3. Select the target WSUS Check
  4. From the Check drop-down
  5. Click Delete Check (also available from the Check's right-click menu)
  6. Enter the password you used to sign into N-sight RMM to confirm removal
  7. Click OK to delete

Settings

Thresholds can be configured for each of the following:

  • Computers needing updates
  • Computers with update errors
  • Updates needed
  • Updates with errors
  • Computers not contacted for over 30 days

More Informaiton

The Agent retrieves all of the information from the main page of the WSUS console which can be displayed by clicking the More Information link. Depending on the version of WSUS installed, will contain the following information:

WSUS v2.0

WSUS v3.0

WSUS from Small Business Server 2008

To allow the Agent to query WSUS on Small Business Server 2008 the account the Advanced Monitoring Agent service runs under must be a member of the WSUS Administrators.

This may be achieved via the Server Manager

  1. Roles > Active Directory Domain > Services > Active Directory > Active Directory users and computers > Domain

And select either:

  1. Users > WSUS Administrators > Right-Click Properties > Members > Add > Select Account

    2. OR

  2. My Business > Users > SBS Users > Select Account > Right-Click Properties > Member of > Add > Select WSUS Administrators