If you need to figure out which server is the WSUS (Windows Server Update Services) server or you need to know if the computer you are working on is pointing to a particular WSUS server, you need to know where the WSUS registry key is.
The WSUS Registry Key is:
HKEY_LOCAL_MACHINE > Software > Policies > Microsoft > Windows > WindowsUpdate
What are the Possible WSUS Registry Values?
AcceptTrustedPublisherCerts Reg_DWORD Range = 1|0
1 = Enabled. The WSUS server will distribute signed third-party updates if available.
0 = Disabled. The WSUS server will not distribute third-party updates.
ElevateNonAdmins Reg_DWORD Range = 1|0
1 = Users in the Users security group are allowed to approve or disapprove updates.
0 = Only users in the Administrators user group can approve or disapprove updates.
TargetGroup Reg_SZ
Name of the computer group to which the computer belongs, used to implement client-side targeting (for example, “TestServers.”) This policy is paired with TargetGroupEnabled.
TargetGroupEnabled Reg_DWORD Range = 1|0
1 = Use client-side targeting.
0 = Do not use client-side targeting. This policy is paired with TargetGroup.
WUServer Reg_SZ
HTTP(S) URL of the WSUS server used by Automatic Updates and (by default) API callers. This policy is paired with WUStatusServer; both must be set to the same value in order for them to be valid.
WUStatusServer Reg_SZ
The HTTP(S) URL of the server to which reporting information will be sent for client computers that use the WSUS server configured by the WUServer key. This policy is paired with WUServer; both must be set to the same value in order for them to be valid.
DisableWindowsUpdateAccess Reg_DWORD Range = 1|0
1 = Disables access to Windows Update.
0 = Enables access to Windows Update.
_______________________
If you want to automatically update there are many additional registry entries that are detailed HERE.
2 Comments
Omar · November 26, 2023 at 3:44 pm
Muchas gracias.
Tamara · January 10, 2023 at 8:33 pm
Appreciate the detail on the WSUS Reg keys. Let me try it out.