Configure WSUS Server Address Using Regedit

This guide explains how to manually configure a client computer to receive updates from a specific Windows Server Update Services (WSUS) server by modifying the Windows Registry. Using the Registry Editor (regedit), you can define the update server location and reporting server, ensuring the machine bypasses default Microsoft Update servers and points directly to your internal update infrastructure.

Step 1: Open Registry Editor

  1. Press Windows Key + R to open the Run dialog box.
  2. Type regedit and press Enter (or click OK).
  3. If prompted by User Account Control (UAC), click Yes to grant administrative privileges.

Step 2: Navigate to the Windows Update Key

Navigate to the following registry path using the left sidebar:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

Note: If the WindowsUpdate key does not exist under Windows, right-click on Windows, select New > Key, and name it WindowsUpdate.

Step 3: Configure WSUS Server Addresses

Inside the WindowsUpdate key, you must create or modify two String values:

  1. WUServer:
    • Right-click an empty area in the right pane, select New > String Value, and name it WUServer.
    • Double-click WUServer and enter your WSUS server URL (e.g., http://wsus.yourdomain.local:8530 or https://wsus.yourdomain.local:8531).
  2. WUStatusServer:
    • Right-click, select New > String Value, and name it WUStatusServer.
    • Double-click WUStatusServer and enter the same URL used for WUServer.

Step 4: Enable WSUS in the AU Subkey

  1. Under the WindowsUpdate key, look for a subkey named AU. If it does not exist, right-click WindowsUpdate, select New > Key, and name it AU.
  2. Select the AU key.
  3. In the right pane, right-click and select New > DWORD (32-bit) Value.
  4. Name the value UseWUServer.
  5. Double-click UseWUServer, set its Value data to 1, and set the Base to Hexadecimal. Click OK.

Step 5: Restart the Windows Update Service

To apply the changes immediately, restart the Windows Update service:

  1. Open Command Prompt as an Administrator.

  2. Run the following commands:

    net stop wuauserv
net start wuauserv

  3. To trigger an immediate check against the newly configured WSUS server, run:

    usoctl StartScan

    (For older Windows versions, use wuauclt /detectnow /reportnow)