

Adam Marshall (MVP) has created a software solution which was once known as Adamj Clean-WSUS. Thankfully there is a fully automated solution available, which covers most of those best practices. All in all the situation is not optimal and rather complicated. Trond E Haavarstein has an article How To Clean Up WSUS which is the TOP post on his blog. In the past I’ve written my own article about How I build and maintain WSUS Server which covers some of this points.

Disable Itanium updates and other unnecessary updates.Configuring WSUS products and categories.Disable IIS AppPool recycling and configure memory limits.Consider using a configuration of 2-4 (WSUS) servers sharing the same SQL server database.Windows Server Update Services Best Practices

The official guidelines can be found here and suggest the following for example: Microsoft itself has an article with official guidelines about what you could and should tune in WSUS, because the default settings won’t keep this service alive for a long time. Let’s take a look at WSUS Automated Maintenance by Adam Marshall! Introduction WSUS is necessary if you plan to cache and control the distribution of Windows and Office updates in your local network. In many companies, either small, medium or large Windows Server Update Services (WSUS) is a must.
