How to disable WSUS in SBS

Since I am on the kick of disabling applications in SBS (Small Business Server), I figured I would post an article on disabling WSUS (Windows Server Update Services).  As with disabling SharePoint, it will save resources and if WSUS is broken then clients are not updating.  This process can be easily reversed if it is decided to re-enable WSUS later.  Lastly this process will not break the SBS console or any of the wizards.

Here is the process for disabling WSUS.

  1. Disable the following services in the services console.  (services.msc)
    • Update Services
    • Windows Internal Database (MICROSOFT##SSEE)*
  2. Disable the application pool and site in IIS (Internet Information Services) manager
    • Launch IIS manager.  (inetmgr)
    • Expand the server name.
    • Click on Application Pools.
    • Right-click WsusPool and choose Stop.
    • Click on Sites.
    • Right-click on WSUS Administration, highlight Manage Web Site, and click Stop.
    • Close the services console and the IIS manager.
  3. Unlink the group policies for WSUS.
    • Launch the Group Policy Management console.  (gpmc.msc)
    • Expand Forest
    • Expand Domains
    • Expand your domain name
    • Right-click on the following policies and select Delete.  You might get a popup indicating that you clicked on link.  Just click OK on that popup.
      • Update Services Client Computers Policy
      • Update Services Common Settings Policy
      • Update Services Server Computers Policy
    • Close the Group Policy Management console.




*For SBS 2008, do not disable this service unless you are also disabling SharePoint.


WSUS uninstall is failing

Yet another issue I have seen a few times.  I am trying to uninstall WSUS (Windows Server Update Services) and I find out that someone deleted the WSUS database from the hard drive.  Without the database, the uninstall of WSUS will fail.

Here is the process I have successfully used every time to uninstall WSUS when the uninstaller fails.  This process will work on both Windows 2008 and Windows 2008 R2.

  1. Open the Windows registry editor.
  2. Navigate to HKLM\Software\Microsoft\Update Services\Server\Setup.
  3. Change the value of “wYukonInstalled” and “SqlInstanceIsRemote” to 0 (zero).
  4. Close the Windows registry editor.
  5. Launch server manager and right-click on Roles.
  6. Click Remove Roles.
  7. On the Server Roles screen, uncheck “Windows Server Update Services” and click Next.
  8. Click Remove.
  9. When the uninstall wizard comes up, leave all three check boxes for database, logs and updates unchecked.  Proceed with removal.
  10. Once WSUS is uninstalled, manually remove the WSUS content and/or database files from the hard drive.