Skip to Content
Last modified by Sebastian Marsching on 2022/05/30 12:44
From version 3.1
edited by Sebastian Marsching
on 2022/05/30 12:27
Change comment: There is no comment for this version
To version 2.1
edited by Sebastian Marsching
on 2022/05/30 12:25
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -22,43 +22,37 @@
22 22  
23 23  # Optimizing IIS pool settings
24 24  
25 -* Queue length: 2000 (default 1000, WAM recommends 25000)
26 -* Idle time-out (minutes): 0 (default 20)
27 -* Ping enabled: False (default True)
28 -* Private memory limit (KB): 0 (unlimited, default 4294967)
29 -* Regular Time Interval (minutes): 0 (default 1740)
25 +- Queue length: 2000 (default 1000, WAM recommends 25000)
26 +- Idle time-out (minutes): 0 (default 20)
27 +- Ping enabled: False (default True)
28 +- Private memory limit (KB): 0 (unlimited, default 4294967)
29 +- Regular Time Interval (minutes): 0 (default 1740)
30 30  
31 -(see <https://docs.microsoft.com/en-us/troubleshoot/mem/configmgr/windows-server-update-services-best-practices>)
31 +(see https://docs.microsoft.com/en-us/troubleshoot/mem/configmgr/windows-server-update-services-best-practices)
32 32  
33 33  # IIS site settings for TLS
34 34  
35 35  Configure TLS certificate for port 8531. After that, run
36 36  
37 -```bat
38 -"%programfiles%\Update Services\Tools\WsusUtil.exe" configuressl <FQDN>
37 + C:\Program Files\Update Services\Tools\WsusUtil.exe configuressl <FQDN>
39 39  
40 -```
41 -
42 42  Require SSL (SSL Settings => Require SSL) for the following endpoints:
43 43  
44 -* ApiRemoting30
45 -* ClientWebService
46 -* DssAuthWebService
47 -* ServerSyncWebService
48 -* SimpleAuthWebService
41 +- ApiRemoting30
42 +- ClientWebService
43 +- DssAuthWebService
44 +- ServerSyncWebService
45 +- SimpleAuthWebService
49 49  
50 -(see <https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh852346(v=ws.11)?redirectedfrom=MSDN#35-secure-wsus-with-the-secure-sockets-layer-protocol> and <https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-7-ssl-setup-for-wsus-and-why-you-should-care/>)
47 +(see https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh852346(v=ws.11)?redirectedfrom=MSDN#35-secure-wsus-with-the-secure-sockets-layer-protocol and https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-7-ssl-setup-for-wsus-and-why-you-should-care/)
51 51  
52 52  # Enabling compression
53 53  
54 54  Enable dynamic compression by running
55 55  
56 -```bat
57 -cscript "%programfiles%\update services\setup\DynamicCompression.vbs" /enable "%programfiles%\Update Services\WebServices\suscomp.dll"
53 + cscript "%programfiles%\update services\setup\DynamicCompression.vbs" /enable "%programfiles%\Update Services\WebServices\suscomp.dll"
58 58  
59 -```
60 -
61 61  # Resources
62 62  
63 -* WSUS Best Practices: <https://docs.microsoft.com/en-US/troubleshoot/mem/configmgr/windows-server-update-services-best-practices>
64 -* WSUS Maintenance: <https://docs.microsoft.com/en-US/troubleshoot/mem/configmgr/wsus-maintenance-guide>
57 +- WSUS Best Practices: https://docs.microsoft.com/en-US/troubleshoot/mem/configmgr/windows-server-update-services-best-practices
58 +- WSUS Maintenance: https://docs.microsoft.com/en-US/troubleshoot/mem/configmgr/wsus-maintenance-guide