WSUS New Features in Windows Server 2012 R2

There are several notable new features in Windows Server 2012 and R2 versions of Windows Server Update Services (WSUS). Server Manager now controls the roles of WSUS servers, such as adding and removing. For example, it is more powerful and convenient to enable it after removing a role from the server than to perform a live migration or install it on another physical machine.

WSUS now adds 12 PowerShell cmdlets to facilitate scripting and automation of WSUS tasks. WSUS now also supports hash-based authentication. Matching the SHA256 hash helps ensure that patches and updates are "trusted", and if the infection code enters a patch or update, it will destroy a business. Finally, WSUS supports two different versions: the server version (WSUS) and the client version called the Windows Update Agent (WUA). WUA does not rely on WSUS or its features.

Remember, WSUS upgrades are usually done during the Windows server operating system version upgrade process. First, you need to uninstall the old WSUS from the target server. Be sure to read the update documentation before proceeding to the next step. It is important to check and understand any potential WSUS issues before upgrading your WSUS server.

The WSUS feature provides IT administrators with a common platform for automating Microsoft product updates and patch management. Before deciding to roll out new code across the enterprise, administrators must take the time to test every expected patch, or update it in a lab environment, measure the impact on reliability and performance, and look for unforeseen results. . There is also a need to develop a backup plan. If there is a problem, such as incompatibility, the administrator can restore it and investigate it after investigating the root cause of the problem and developing corrective actions.