How to Configure WSUS Server Using Regedit

Setting a static Windows Server Update Services (WSUS) address locally allows system administrators to point specific Windows client machines to an internal update server without relying on Active Directory Group Policy Objects (GPOs). This guide outlines the exact registry keys and values required to configure the WSUS update server and reporting server URLs, activate the policy via the Registry Editor (regedit), and restart the necessary services to apply the configuration.

Required Registry Keys and Values

To point a client machine to a WSUS server, you must configure values under the WindowsUpdate policy hive in the Windows Registry:

• Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
  • WUServer (REG_SZ / String): The HTTP or HTTPS URL and port of the WSUS server (e.g., http://wsus.yourdomain.local:8530).
  • WUStatusServer (REG_SZ / String): The reporting server URL, typically identical to WUServer.
• AU Subkey Path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  • UseWUServer (REG_DWORD / 32-bit Value): Set to 1 to force Windows Update to look for updates on the specified WSUS server rather than Microsoft Update.

Step-by-Step Configuration

Step 1: Open the Registry Editor

1. Press Win + R to open the Run dialog.
2. Type regedit and press Enter (select Yes if prompted by User Account Control).

Step 2: Create the WindowsUpdate Key

1. In the left navigation pane, navigate to:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

2. Check if a subkey named WindowsUpdate exists under Windows.

3. If it does not exist, right-click Windows, select New > Key, and name it WindowsUpdate.

Step 3: Configure WSUS Server URLs

1. Select the WindowsUpdate key.
2. In the right-hand pane, right-click an empty area and select New > String Value.
3. Name the value WUServer and press Enter.
4. Double-click WUServer, set the Value data to your WSUS server address (e.g., http://wsus.yourdomain.local:8530), and click OK.
5. Create another String Value named WUStatusServer.
6. Double-click WUStatusServer, set the Value data to the same WSUS server URL, and click OK.

Step 4: Enable the WSUS Policy

1. Right-click the WindowsUpdate key in the left pane, select New > Key, and name it AU.
2. Select the newly created AU key.
3. In the right-hand pane, right-click and select New > DWORD (32-bit) Value.
4. Name the value UseWUServer.
5. Double-click UseWUServer, set its Value data to 1 (ensure the base is Hexadecimal), and click OK.

Apply Changes and Force Update Check

Registry changes take full effect once the Windows Update service is restarted and a check-in is initiated.

1. Open Command Prompt or PowerShell as an Administrator.

2. Restart the Windows Update service by running:

   net stop wuauserv
   net start wuauserv

3. Trigger an immediate update check and status report to the WSUS server:

   • On Windows 10 / Windows 11 / Windows Server 2016+:

     usoclient StartScan

   • On Windows 8.1 / Windows Server 2012 R2 and older:

     wuauclt /resetauthorization /detectnow /reportnow

Once executed, the client machine will begin contacting the statically assigned WSUS server for updates and reporting.