...
Non-critical updates for Windows, Windows components, and out of band patches are considered and released as necessary. Security patches may be declined if they are found to cause issues and patches may be approved prior to the scheduled date if necessary
Maintenance Windows
Since ISS hosts the OIT WSUS Server, their windows are listed below:
- Every day, 4AM-8AM
- Wednesday, 6PM-10PM
Any service changes by OIT will be made within the same windows detailed above. OIT Liaisons will be notified of any outages 48 hours in advance except in certain extenuating circumstances.
WSUS GPO and Windows Update Settings
OIT applies a GPO to configure its WSUS settings
- Automatically download and schedule installation for every day at 3 AM
- Silently install minor updates
- 12 hours between detection cycles
- Logged-on user can decide whether to restart the client computer
- 5 minutes between prompts for a scheduled restart
| Code Block |
|---|
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://wsus.moit.tufts.edu"
"WUStatusServer"="http://wsus.moit.tufts.edu"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"AutoInstallMinorUpdates"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000003
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:00000005
"UseWUServer"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:00000005
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:0000000c
"NoAUShutdownOption"=dword:00000001
|