What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

After installing and configuring WSUS, you can use Group Policy to configure clients to receive Windows Updates from the WSUS server. Here are the steps

WSUS GPO Requirements

To complete the steps in this guide you require the following:

  1. A WSUS Server with post-WSUS Configuration Wizard completed.
  2. Windows Domain Controller

Step 1: Create a Group Policy Object for WSUS

The first step is to create the GPO. Here are the steps:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Login to your domain controller and open Server Manager
  • From Server Manager, click Tools. Then select Group Policy Management.
Create a Group Policy Object for Windows Updates Server 2016
  • When Group Policy Management opens, expand your domain. Then expand Group Policy Objects container.
  • To create a new GPO, drag and drop Default Domain Policy to Group Policy Objects container.
group policy windows updates server 2016
  • At the Copy GPO prompt, click OK. The GPO will be copied to a new one. Click OK.
group policy windows updates server 2016
group policy windows updates server 2016
  • Right-click Copy of Default Domain Policy GPO. Then select Rename. Give the GPO a descriptive name. See mine in the second image below.

After creating the Group Policy object, the next step is to link it to an AD container. You can link a GPO to one of the following AD containers: Site, Domain or Organizational Units (OU).

#1 Best Overall
Windows Server Standard 2016, 64-Bit, 16-Core
  • Enhance security and reduce risk with multiple layers of protection, built into the operating system.
  • Save money and gain flexibility with software-defined compute, storage, and networking technologies, inspired by Microsoft Azure.
  • Use improved technologies, such as Windows containers and Nano Server, for another ways to deploy and run on-premises and cloud-based apps.
  • License - 16 cores - OEM - DVD - 64-bit - English
You can link a GPO to Site, Domain or Organizational Units (OU).

When you link a GPO to a container, all eligible objects within the container will apply the policies configured in the GPO.

In this demo, I will link the GPO for Windows Server Update Service to the domain.

Rank #2
Dell PowerEdge T110 II Tower Server, Xeon E3-1220, 32GB DDR3, 8TB, PERC 6i RAID, DVD-ROM, Windows Server 2016 (Renewed)
  • Dell PowerEdge T110 II 4-Bay 3.5" HDD Tower Server, a mini server made for small businesses and remote offices!
  • Intel Xeon E3-1220 Quad-Core 3.1GHz 8MB Cache CPU, Turbo Up To 3.4GHz
  • 32GB DDR3 PC3-10600 1333MHz ECC Memory; 8TB (4 x 2TB) 7200 RPM SATA Hard Drives for High Capacity Storage
  • Microsoft Windows Server 2016 Operating System Included

Here are the steps:

  • Drag the GPO from the Group Policy Objects container to the AD container you wish to link it. In this example, I will drag mine to my domain (iTechGuides.local).
  • You will then be prompted to confirm that you wish to link the GPO to the container. To confirm, click OK. The GPO is linked and will now appear beneath the container (See the second image below – after the advert).

Step 3: Configure GPO For WSUS

The next step is to configure the GPO to apply Windows updates the way you want it or your organization’s policy demands.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Here are the steps:

  • Right-click the new GPO you linked to an AD container in the last section. Then select Edit.
Configure Group Policy Object for Windows Updates Server 2016
  • When Group Policy Management Editor opens, expand Computer Configuration container. Then expand Policies and navigate to Administrative Templates\Windows Components. Finally, click Windows Update. The default view is Extended but I like to change mine to Standard. It is a matter of preference.

Now the fun begins!

  • Locate and double-click a Configure Automatic Updates policy.
  • To enable the policy, select Enabled.
  • Then beneath Options:, Configure automatic updating select one of the following:
    > 2 – Notify for download and auto install
    > 3 – Auto download and notify for install (Default)
    > 4 – Auto download and schedule the install
    > 5 – Allow local admin to choose setting

Read what each of these settings means and what they do. The info on the details pane of the GPO explains each setting in detail.

Rank #3
Haiway External CD DVD Drive, USB 3.0 Type-C CD Burner for Laptop PC White
  • True Plug and Play Simplicity: Haiway External DVD Drive offers true plug-and-play functionality. Designed for simplicity, this usb cd/dvd external drive draws power directly from your computer's USB port, eliminating the need for an external power supply. No drivers to install. (For Mac users, the drive icon will appear once a readable disc is inserted.)
  • Say Goodbye to Short Cables: Our external cd drive for laptop pc features a 12.8-inch cable. At 3 inches longer than most embedded cable design, eliminates the hassle and constraint of short cables, ensuring a stable connection and a much more comfortable user experience in any setting.
  • High-Speed USB 3.0 & Type-C Connectivity: This cd burner equipped with USB 3.0 and Type-C interface ensures broad compatibility with both new and legacy devices. Max DVD read speed 8x; Max CD read speed 24x and max CD burn speed 8x. Bringing you faster data transmission speed (Up to 5Gbps), enjoy smooth playback and efficient burning!
  • All-in-One Reading & Burning Capability: This versatile external cd/dvd drive for laptop supports a wide range of formats including CD-R, CD-RW, DVD±R, and DVD±RW. It's your perfect solution for burning home videos, creating music CDs, installing software/games, backing up important data, or simply enjoying your favorite movies.
  • Wide Compatibility with Windows & Mac: This external CD/DVD drive offers extensive compatibility. It is fully compatible with modern systems like Windows 11/10 and the latest macOS, as well as older systems including Windows XP/Vista and various Linux distributions, ensuring it works with virtually any computer you own.

From my personal experience, options 3 (default) or 4 work for most organizations.

  • Also set the day and time you wish to install updates. Use the Scheduled install day and Scheduled install time to determine when the clients will install the updates.
group policy windows updates server 2016
  • When you finish, click OK.
  • The next important group policy for Windows updates Server 2016 is Specify intranet Microsoft update service location. This is where you specify your WSUS Server. Locate this policy and open it.
group policy windows updates server 2016
  • To enable this policy, select Enabled. Then on the Options section of the policy, enter your WSUS server in the Set the intranet update service for detecting updates field. Also add the server to the Set the intranet statistics server field. Use the format shown in the image below.
group policy windows updates server 2016
  • When you finish modifying the policy, click OK.
  • There is one more important group policy for Windows updates Server 2016 – Specify deadlines for automatic updates and restart. Configure this policy to force computers to apply update and restart. Locate and open this policy.
  • To enable this policy, select Enabled. Then on the Options sections, select the deadline(in days) that a computer will be forced to install Quality updates and Feature updates. You can allow up to 30 days installation deadline. You can also determine restart Grace period (in days) – up to a max of 7 days. When you finish, click OK.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Conclusion

After you configure these policies, computers are expected to accept the policies and appear in the WSUS console. A computer may take up to 30 minutes to show up in WSUS console.

Rank #4
Dell PowerEdge T340 Tower Server, Windows 2016 Standard, Intel Xeon E-2124 Quad-Core 3.3GHz 8MB, 64GB DDR4, 16TB SATA 6Gb/s + 2TB SSD (18TB Total), H730 RAID 2GB Cache, Dual PSU (Renewed)
  • Processors: Intel Xeon E-2124 Quad-Core 3.3GHz 8MB CPU, Up To 4.3GHz Turbo
  • Memory: 64GB (4 x 16GB) DDR4 PC4-21300 2666MHz Unbuffered Memory
  • Solid State Drives: 2TB (4 x 500GB) 6Gb/s SATA III SSDs in RAID
  • Hard Drives: 16TB (4 x 4TB) 6Gb/s SATA 7200 3.5" Hard Drives in RAID
  • Dual Power Supplies, Windows Server 2016 Standard Operating System

To force a computer to apply the polices immediately: open the command prompt from the computer. Then type this command and press enter.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
gpupdate /force

I hope you found this Itechguide helpful. If it was helpful please spare a few minutes to share your thoughts with us by responding to the “Was this page helpful?” question below.

Best Value
Sale
Ziweo External CD DVD Drive, Portable USB 3.0 Type-C CD Burner CD +/-RW Drive DVD Player for ROM Rewriter Burner Compatible with Laptop Desktop PC Windows MacBook Linux Mac OS
  • Plug and Play: Equipped with both USB 3.0 and USB-C ports, this external CD/DVD drive requires no external drivers or power supplies. Automatically detected by laptops and desktops. Warming: It serves as the perfect companion for devices lacking a built-in DVD drive. NOTE: The integrated cable is non-detachable to prevent loss.
  • Reliable Design & High Speed Quiet: Made of high-quality materials, shockproof, low noise, and strong fault tolerance. Ensures smooth and fast reading and writing of CDs/DVDs without stuttering or noise. Offers max 8x DVD rewrite/read speed and max 24x CD write/read speed. Supports data transmission up to 5Gbps. Ultra-thin design with a subtle machine size, easily fits into travel bags. Perfect for business and travel use.
  • Wide Compatibility: Works with Windows XP/2003/Vista/7/8/10, Linux OS, and all Mac OS versions. Plays movies, burns/rips CDs, installs software, and backs up data. NOTE: Not suitable for cars, TVs, mobile phones, Blu-ray discs. You can use this external CD/DVD player to play movie DVDs, burn/rip CDs, install software/system, DVD games, back up data to CD/DVD,and more. (Not support TV, car player, Chromebook, Surface Pro, Ubuntu.)
  • Technical Support & Usage Tips: If the device is not recognized, try restarting your computer or testing with a different disc. Requires 3V-5V (1.3A-2A) output from your computer’s USB port. Keep the external CD/DVD drive away from magnetic objects. Ensure your laptop has sufficient power—low power may cause recognition failure. Our dedicated customer service team is always available to assist with any compatibility or connectivity issues to ensure satisfied experience.
  • Troubleshooting & Solutions: Common Causes of Freezing - 1. Insufficient power supply through USB; 2. Damaged or dirty disc; 3. Compatibility issues with certain software programs. [Check Your Drive: 1. Make sure the disc is clean and not scratched; 2. Try a different disc to see if the problem persists; 3. Ensure the drive's lens is clean.] --- Quick Fixes: 1. Try a different USB port - Use a USB 3.0 port (usually blue); 2. Connect directly to your computer - Avoid using USB hubs, as they may not provide enough power; 3. Restart your computer with the drive disconnected, then reconnect it; 4. Check the disc - Try a different CD/DVD to see if the issue is with the specific disc.

To read the full steps to install and configure Windows Server Update Service in Server 2016, click WSUS Windows Server 2016: Installation and Configuration.

However, if you want more Windows Server guides, visit our Windows Server page.

Quick Recap

Bestseller No. 1
Windows Server Standard 2016, 64-Bit, 16-Core
Windows Server Standard 2016, 64-Bit, 16-Core
License - 16 cores - OEM - DVD - 64-bit - English
$499.99
Bestseller No. 2
Dell PowerEdge T110 II Tower Server, Xeon E3-1220, 32GB DDR3, 8TB, PERC 6i RAID, DVD-ROM, Windows Server 2016 (Renewed)
Dell PowerEdge T110 II Tower Server, Xeon E3-1220, 32GB DDR3, 8TB, PERC 6i RAID, DVD-ROM, Windows Server 2016 (Renewed)
Intel Xeon E3-1220 Quad-Core 3.1GHz 8MB Cache CPU, Turbo Up To 3.4GHz; Microsoft Windows Server 2016 Operating System Included
$1,263.99
Bestseller No. 4
Dell PowerEdge T340 Tower Server, Windows 2016 Standard, Intel Xeon E-2124 Quad-Core 3.3GHz 8MB, 64GB DDR4, 16TB SATA 6Gb/s + 2TB SSD (18TB Total), H730 RAID 2GB Cache, Dual PSU (Renewed)
Dell PowerEdge T340 Tower Server, Windows 2016 Standard, Intel Xeon E-2124 Quad-Core 3.3GHz 8MB, 64GB DDR4, 16TB SATA 6Gb/s + 2TB SSD (18TB Total), H730 RAID 2GB Cache, Dual PSU (Renewed)
Processors: Intel Xeon E-2124 Quad-Core 3.3GHz 8MB CPU, Up To 4.3GHz Turbo; Memory: 64GB (4 x 16GB) DDR4 PC4-21300 2666MHz Unbuffered Memory
$4,880.00

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.