To install the WSUS administration console, choose the route that matches the computer you are configuring: install the WSUS server role with management tools using Server Manager or PowerShell, or add WSUS tools through RSAT on a separate administration computer. The first two routes install the server role as well as its console; RSAT is the route for managing an existing WSUS server remotely.
Choose the right installation route
| Route | Where to use it | What it installs | Best fit |
|---|---|---|---|
| Server Manager | Windows Server that will host WSUS | WSUS server role and management console | Interactive, guided setup |
| PowerShell | Windows Server that will host WSUS | WSUS server role and management console when -IncludeManagementTools is specified |
Scripted or repeatable setup |
| RSAT | Separate administration computer | WSUS administration tools | Managing an existing WSUS server remotely |
Microsoft’s WSUS role installation guidance applies to Windows Server 2016, 2019, 2022, and 2025, and also lists Windows 10 and 11 in its applicability metadata. Its detailed installation procedure is for adding the server role to Windows Server, not for installing only a console on a workstation. See Microsoft’s WSUS server role installation guide.
Install WSUS and its console with Server Manager
Use this method on the server intended to host WSUS. Sign in with an account in the server’s local Administrators group. The wizard installs the WSUS role and its management console; it is not a console-only installation.
- Open Server Manager and select Manage > Add Roles and Features.
- On the installation type page, choose a role-based or feature-based installation, then select Next.
- Select the destination server and continue.
- On the Server Roles page, select Windows Server Update Services. When prompted, accept the required features, then continue through the wizard.
- Choose the documented WSUS role services and database options appropriate for your deployment, and complete the remaining wizard pages.
- After installation, complete the WSUS post-installation tasks. The role installation is not complete for deployment purposes until those tasks finish.
Microsoft’s roles and features documentation also explains that Server Manager can target a local or remote server, as well as an offline VHD. A Server Core installation does not install GUI-based management tools and snap-ins, so do not expect a graphical WSUS console to appear on Server Core.
#1 Best Overall
Install WSUS and its console with PowerShell
Run PowerShell as an administrator on the Windows Server that will host WSUS. Install the role with management tools included:
Install-WindowsFeature -Name UpdateServices -IncludeManagementToolsThe -IncludeManagementTools parameter is what requests the WSUS management console alongside the role. Microsoft’s example also uses -Restart when an automatic restart is acceptable:
Install-WindowsFeature -Name UpdateServices -IncludeManagementTools -RestartReview the command result to determine whether a restart is required; do not assume one is needed in every installation. As with the wizard route, this command installs the WSUS server role, not just remote management tools. PowerShell role and feature installation guidance is covered in Microsoft’s Server Manager roles and features documentation.
Install WSUS tools on a separate administration computer with RSAT
If a WSUS server already exists and you want to administer it from another Windows computer, install the WSUS administration tools on that management computer rather than installing the WSUS server role there. Microsoft lists Windows Server Update Services Tools among the Remote Server Administration Tools (RSAT) used to manage WSUS servers.
Rank #3
- Check Microsoft’s RSAT guidance for the version of Windows and installation context on the administration computer.
- Use the RSAT installation method applicable to that system, such as the documented Windows interface or PowerShell guidance.
- Confirm that Windows Server Update Services Tools is available for the target OS before choosing a feature name or command. Microsoft’s general RSAT guidance does not provide one WSUS-specific feature command for every Windows version.
- After installation, open the WSUS management tool and connect it to the existing WSUS server.
For current RSAT installation instructions and the WSUS Tools listing, consult Microsoft’s Install and Manage Remote Server Administration Tools in Windows.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to know about Server Core and WSUS status
Windows Server Core does not include GUI-based management tools and snap-ins. Microsoft notes that command-line and PowerShell management tools can still be installed, so a graphical-console requirement may call for administering the server from a separate computer with the relevant RSAT tools.
Rank #4
- Mastering Active Directory: Design, deploy, and protect Active Directory Domain Services for Windows Server 2022, 3rd Edition
- ABIS BOOK
- Packt Publishing
Microsoft describes WSUS as deprecated: it is no longer receiving new features, but remains supported for production deployments and receives security and quality updates according to the product lifecycle. Check Microsoft’s WSUS overview and applicable lifecycle information for current status.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
