How to prevent PCs to download patches from wsus server during day

We have windows 2003 server with wsus installed. It works. However, because
slow WAN connection problems. We would like to prevent PCs to download
patches from wsus server during day time. Is there anyway to do it? We have
set up install patches automatically at 10:00 PM every night. But we cannot
find a way to easily control patches download time from wsus server to
workstaion.

WSUS Fan wrote:

> We have windows 2003 server with wsus installed. It works. However, because
> slow WAN connection problems. We would like to prevent PCs to download
> patches from wsus server during day time. Is there anyway to do it? We have
> set up install patches automatically at 10:00 PM every night. But we cannot
> find a way to easily control patches download time from wsus server to
> workstaion.
Hi,

There is a group policy setting available for "Background Intelligent
Transfer Service" (BITS) that can limit the downloads during the day.
The policy is named "Maximum network bandwith that BITS uses"

If group policy (AD) is not available to you, you can set the settings
with registry values.

The registry file below configure BITS to the following:

Limit BITS transfer rate (Kbps) to 0 From 9 AM to 5 PM, At all other
times, use all available unused bandwidth

--------------------8<----------------------
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\BITS]
"EnableBITSMaxBandwidth"=dword:00000001
"MaxTransferRateOnSchedule"=dword:00000000
"MaxBandwidthValidFrom"=dword:00000009
"MaxBandwidthValidTo"=dword:00000011
"UseSystemMaximum"=dword:00000001
"MaxTransferRateOffSchedule"=dword:00000014

--------------------8<----------------------
(be sure to have a blank line at the end of the registry file)


And a fyi:

Please post WSUS related issues to the newsgroup dedicated to WSUS:
microsoft.public.windows.server.update_services

WebNews link to the WSUS newsgroup:
http://www.microsoft.com/communities...pdate_services


Or use a newsgroup reader (default Outlook Express) to access this new
group:

Clicking on this link should open this group in OE:

news://msnews.microsoft.com/microsof...pdate_services




--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

Hi Torgeir,

Thanks for your reply. The info is very helpful! I would like to set up
the maximum network bandwidth that BITS users to zero during daytime. So
client workstaions will not download anything from wsus server. But will
the changes of "Maximum network bandwith that BITS uses" inside my wsus group
policy affect other applications? Will it prevent other application from
using BITS? I am afraid that other applications may stoo running. Please
let me know.

Thank you very much!

WSUS Fan

"Torgeir Bakken (MVP)" wrote:

> WSUS Fan wrote:
>
> > We have windows 2003 server with wsus installed. It works. However, because
> > slow WAN connection problems. We would like to prevent PCs to download
> > patches from wsus server during day time. Is there anyway to do it? We have
> > set up install patches automatically at 10:00 PM every night. But we cannot
> > find a way to easily control patches download time from wsus server to
> > workstaion.
> Hi,
>
> There is a group policy setting available for "Background Intelligent
> Transfer Service" (BITS) that can limit the downloads during the day.
> The policy is named "Maximum network bandwith that BITS uses"
>
> If group policy (AD) is not available to you, you can set the settings
> with registry values.
>
> The registry file below configure BITS to the following:
>
> Limit BITS transfer rate (Kbps) to 0 From 9 AM to 5 PM, At all other
> times, use all available unused bandwidth
>
> --------------------8<----------------------
> REGEDIT4
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\BITS]
> "EnableBITSMaxBandwidth"=dword:00000001
> "MaxTransferRateOnSchedule"=dword:00000000
> "MaxBandwidthValidFrom"=dword:00000009
> "MaxBandwidthValidTo"=dword:00000011
> "UseSystemMaximum"=dword:00000001
> "MaxTransferRateOffSchedule"=dword:00000014
>
> --------------------8<----------------------
> (be sure to have a blank line at the end of the registry file)
>
>
> And a fyi:
>
> Please post WSUS related issues to the newsgroup dedicated to WSUS:
> microsoft.public.windows.server.update_services
>
> WebNews link to the WSUS newsgroup:
> http://www.microsoft.com/communities...pdate_services
>
>
> Or use a newsgroup reader (default Outlook Express) to access this new
> group:
>
> Clicking on this link should open this group in OE:
>
> news://msnews.microsoft.com/microsof...pdate_services
>
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>

WSUS Fan wrote:

> Hi Torgeir,
>
> Thanks for your reply. The info is very helpful! I would like to set up
> the maximum network bandwidth that BITS users to zero during daytime. So
> client workstaions will not download anything from wsus server. But will
> the changes of "Maximum network bandwith that BITS uses" inside my wsus group
> policy affect other applications? Will it prevent other application from
> using BITS? I am afraid that other applications may stoo running. Please
> let me know.
Hi,

Yes, it will prevent other application from using BITS. But most likely
you have no 3rd party client application that uses BITS, because those
are extremely rare (myself, I do not know of any single one).


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx