GPO configuration for WSUS

by lionardo

Open group policy management and create new policy

In GP object go to: Computer configuration -> Policies -> Administrative templates -> Windows components -> Windows update

Settings that I changed:

Allow Automatic Updates immediate installation: Enabled
Allow non-administrators to recieve update notifications: Enabled
Confugure Automatic Updates:
--Configure automatic updating: 4- Auto download
--Scheduled install day:  0 - Everyday Install time 03:00
--Mark "V" on Every week
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box: Enabled
Do not display 'Install updates and Shut Down' option in Shut Down Windows dialog box: Disabled
Specify intranet Microsoft update service location: Enabled
--Set the intranet update service: http://Your_WSUS_Server:8530
--Set the intranet statistics server: http://Your_WSUS_Server:8530

Assign policy to relevant OU in your domain
You can enable other settings if you want so