OIT : Online Guides > Automating Windows Updates

Automating Microsoft Windows Updates

Security

If you are responsible for a computer that is connected to the University's network, you must update your system as soon as critical security updates are available.

To safeguard the integrity of University of Minnesota computers, networks, and data and their availability for appropriate educational and business activities, OIT is offering an automated Windows Software Update Service (also known as WSUS) that will help many Microsoft Windows users.

Who should use this Software Update Service?

NOTE for Active Directory users: If your workstation or server is a part of the central Active Directory (UMN.EDU domain), do not configure your computer to use the OIT WSUS service described here; the default Active Directory Group Policy rules will already have been applied to take care of Windows Updates.

The primary audience for this service are users of the following operating systems:

• Personal computers and workstations: Windows Vista, Windows 2000 Professional, Windows XP Professional, and Windows XP Home Edition
• servers: Windows Server 2008, Windows Server 2003

Since Microsoft's update sites frequently become very busy when critical updates are released, this service will make installing updates quicker and easier than before. Wireless and modem users who are usually connected for less than 30 minutes may not benefit from using this service; see the "Update Schedule" section below.

Obtaining and installing OITSUS

If you have not used Microsoft's "Windows Update" recently, we recommend you that do so before installing the OITSUS registry file. Using Microsoft's update will ensure that you have the latest service pack that makes this kind of update service possible.

Downloading and installing OITSUS is quick and easy.

1. Right-click this link and select "Save Link Target As" or "Save Target As." (The file name you see, OITSUS or OITSUS.reg, depends on whether or not your system is set up to show file name extensions, the .reg portion of the name.)
2. Locate the OITSUS file. (If you are typical, the file will be saved in your "My Documents" folder.) Double-click on the OITSUS file to install it.
3. Once you have begun the installation process, the Registry Editor will ask a question similar to this:
   "Do you want to add the information in C:\DOCUME~1\YOURNAME\MYDOC\OITSUS to the Registry?" To install the software you must select "Yes."

That's it. The settings are now part of your system.

Update schedule

Once your system is set up to use this service, you will be alerted whenever a critical update is about to be installed on your system. Updates are scheduled for 4 p.m. If you are not logged in at 4 p.m., the update will be applied 30 minutes after your system is started.

Restarting your computer
Some updates do not require a system restart, others do. If an update requires that you must restart your system, you will be prompted to do this. In these cases the update will not take effect until you restart your system. Before restarting your system, save your work and close any open applications.

To stop using OIT's WSUS

Remember: if you remove this configuration, you must use "Windows Update" to keep your computer secure. To stop using this service, remove the registry key by following these steps:

1. Select "Run" from the Start menu.
2. At the command prompt, as shown in the sample "Run" figure below,
   • enter this registry key delete command:
     reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
     (Copy and paste the entire line, from "reg" through "Update", to avoid errors.)
     
     
   •  and click the OK button when you are done

3. The system will respond with a message similar to this:
   "Permanently delete the registry key SOFTWARE\Policies\Microsoft\Windows\WindowUpdate (Y\N)?"
   To delete OITSUS you must respond with a Yes.

FAQ

See the OITSUS FAQ for more information about this service.

U-Wide Information Technology Policies

Links to the University's Security Patch Standard and all University-wide Information Technology policies are available at this OIT website: http://www.umn.edu/oit/policies/