2. Jodie Gaver Jodie Gaver Working with Configuration Manager since 2010 - Working with Configuration Manager since 2010 -MCTS: Administering and Deploying System Center 2012 Configuration Manager - Windows Server 2008 Active Directory Configuration -MCP This Presentation: -Software Updates / WSUS Cleanup -Troubleshooting and log files

3. After time the updates begin to pile up…let’s find a way to manage them

4. 1.Navigate to the All Software Updates node under Software Library, and search for all expired updates. 2. Under “Add Criteria” check “Expired” then “Add”, leave the default value as “Yes”, and click search.

5. 3. The search results will include all of your expired updates, so simply select all updates in the list view (CTRL+A), right-click, and choose Edit Membership.

6. 4.You will see a list of all Update Groups where any of the selected updates from the list view are members. Simply uncheck the selected check boxes. (If you haven’t done this, it could take awhile) 5.Click OK to remove all of the expired updates from the selected Update Groups, and they’ll be set for deletion

7. 6. You can see expiration activity in logs, through wsyncmgr.log Look for a line in the log that looks like the following: 7. Expired updates still show up in the console, but they are marked as expired, and have the following icon showing this state: They will remain in the console for 7 days following expiration. 5. After 7 days, expired updates that are not associated with active deployments, are tomb-stoned. This means they are no longer visible in the UI Use wsyncmgr.log to view the removal of these updates: Deleting old expired updates... SMS_WSUS_SYNC_MANAGER 4/26/2015 12:06:16 AM Deleted 80 expired updates SMS_WSUS_SYNC_MANAGER 4/26/2015 12:06:20 AM Deleted 80 expired updates total SMS_WSUS_SYNC_MANAGER 4/26/2015 12:06:20 AM

8. 7 days later

9. Cleanup on the WSUS Sever * Recommended monthly, do not perform task during heavy load times (especially if you have never ran it) Open “Windows Server Update Services” on the server you have the SUP Role installed on Expand Update Services -> Server -> Options then select “Server Cleanup Wizard”

10. Choose what you want to cleanup If you have never done this, you may want to do a step or 2 at a time

11. Before starting WSUS Cleanup Wizard After starting WSUS Cleanup Wizard

12. After WSUS Server Cleanup Wizard is complete

13. …who does anything manually if they can automate it?

14. WSUS cleanup with Powershell in a Basic Scheduled Task On the WSUS Server, Create a Basic Task Name it something cool

15. Set the Start date, Time (not peak hours), Select All Months and Day(s) “Start a Program”

16. Create a Basic scheduled monthly task, Set the “Start a Program” to “Powershell”, paste the PS command into the Add Arguments box Get-WsusServer | Invoke-WsusServerCleanup -CleanupObsoleteComputers -CleanupObsoleteUpdates - CleanupUnneededContentFiles -CompressUpdates -DeclineExpiredUpdates -DeclineSupersededUpdates More on the Arguments here

17. “Run” if you don’t want to wait On the “History” tab you can see if it completed successfully

18. Troubleshooting Test it in PowerShell Or Bing it!!