Mon, Jan 31 2011 22:20
bradley
So you use another patching tool and don't want WSUS on your SBS 2011?
So you use another patching tool and don't want WSUS on your SBS 2011? Can you uninstall WSUS?
No, please don't. Doing so will cause WSUS uninstallation to remove the suscomp.dll from the server. The problem is it doesn't remove it from the IIS config file.
Cleaning up WSUS Failed Upgrade on SBS 2008:
http://www.sbsfaq.com/?p=2381
HTTP Error 500.19 on SBS 2008:
http://www.sbsfaq.com/?p=2379
So what's the best way to shut off WSUS but not mangle IIS? You can turn off UpdateServices service and the Windows Internal Database (assuming that you don't have a line of business app using this inside the services.
Or you can disable all the approval but keep the WSUS engine in place to be an 'auditing' tool of your OTHER patching tool.
To do this go into the security tab on the server and do the following adjustments to the default settings.
Then launch the WSUS console and make an edit in the products and classifications.
Never change the side of "Products" as that will turn the WSUS integration off.
On the classifications tab, add feature packs and updates. Don't check drivers or tools.
Now the WSUS is set to audit your normal patch tool. It won't deploy patches, it will just compare your network to what WSUS sees as should be installed.
![[There's a reason that Yoda is the unofficial mascot of SBS. Size indeed matters not.]](http://www.sbslinks.com/images/headertop.png "There's a reason that Yoda is the unofficial mascot of SBS. Size indeed matters not!")