Windows 2003 Server & UDP

Do you know of a way to prevent Windows Update from trying to go to
Microsoft, by using a firewall? My Windows 2003 Server wants to get the
latest updates all the time, and I was thinking that I need to setup a UDP
port to block Windows Update. Do you know what Windows Update uses? Isn't
it just a UDP port?

"Patrick Whittle" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Do you know of a way to prevent Windows Update from trying to go to
> Microsoft, by using a firewall? My Windows 2003 Server wants to get the
> latest updates all the time, and I was thinking that I need to setup a UDP
> port to block Windows Update. Do you know what Windows Update uses?
Isn't
> it just a UDP port?
>

Am I missing something here? Why not just switch off Windows Update?

I plan on letting a couple updates run, then after that, I don't want the
pop-up anymore.

"Bill Kearney" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) t...
>
> "NeilH" <(E-Mail Removed)> wrote in message
> news:%23%(E-Mail Removed)...
>>
>> "Patrick Whittle" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>> Do you know of a way to prevent Windows Update from trying to go to
>>> Microsoft, by using a firewall? My Windows 2003 Server wants to get the
>>> latest updates all the time, and I was thinking that I need to setup a
>>> UDP
>>> port to block Windows Update. Do you know what Windows Update uses?
>> Isn't
>>> it just a UDP port?
>>>
>>
>> Am I missing something here? Why not just switch off Windows Update?
>
> There's two services it would use, automatic updates and BITS. Disable
> those and you pretty much end updating.
>
> The question is, however, why would you want to disable getting updates.
> Many are security oriented and well worth updating.
>
> -Bill Kearney

"Patrick Whittle" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I plan on letting a couple updates run, then after that, I don't want the
>pop-up anymore.

It's easier to change Windows update settings than altering firewall ports,
shuttding down services, etc.

If you want to pick and choose updates for all machines, you can use WSUS to
control which updates you want. Install WSUS on your server, pick and choose
updates, setup a group policy for your machines to use your server for
Windows updates instead of Microsoft's site, and you should be good to go.
If the machines are not joined to the domain, you can alter the registry
entries on your machines, such as the Windows Home machines, to use the
server for Windows Update.

Read more here:

Windows Server Update Services (WSUS) Home... downloads, support, and
community. Evaluate and find out how to install, deploy, and maintain WSUS.
Read the deployment papers to understand how to set it up, machine targeting
using GPOs, etc.
Click on the links under the section "Install and Learn" which are: 1)
Deployment Guide, 2). Step by Step Installation Guide, and 3) Operations
Guide
http://technet.microsoft.com/en-us/wsus/default.aspx

Download the latest version WSUS 3.0 SP2 in the next link.

Download details: Windows Server Update Services 3.0 SP2, Aug 25, 2009 ...
Click Save to copy the download to your computer for installation at a later
time. Before installing you install WSUS 3.0 SP2: ...
http://www.microsoft.com/downloads/d...ilyId=a206ae20

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Hey thanks Ace.
If you're the Ace man, I'm the Whittler.

PS whittler.com is already taken.

"Ace Fekay [MCT]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Patrick Whittle" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>>I plan on letting a couple updates run, then after that, I don't want the
>>pop-up anymore.
>
> It's easier to change Windows update settings than altering firewall
> ports, shuttding down services, etc.
>
> If you want to pick and choose updates for all machines, you can use WSUS
> to control which updates you want. Install WSUS on your server, pick and
> choose updates, setup a group policy for your machines to use your server
> for Windows updates instead of Microsoft's site, and you should be good to
> go. If the machines are not joined to the domain, you can alter the
> registry entries on your machines, such as the Windows Home machines, to
> use the server for Windows Update.
>
> Read more here:
>
> Windows Server Update Services (WSUS) Home... downloads, support, and
> community. Evaluate and find out how to install, deploy, and maintain
> WSUS. Read the deployment papers to understand how to set it up, machine
> targeting using GPOs, etc.
> Click on the links under the section "Install and Learn" which are: 1)
> Deployment Guide, 2). Step by Step Installation Guide, and 3) Operations
> Guide
> http://technet.microsoft.com/en-us/wsus/default.aspx
>
> Download the latest version WSUS 3.0 SP2 in the next link.
>
> Download details: Windows Server Update Services 3.0 SP2, Aug 25, 2009 ...
> Click Save to copy the download to your computer for installation at a
> later time. Before installing you install WSUS 3.0 SP2: ...
> http://www.microsoft.com/downloads/d...ilyId=a206ae20
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
> 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>

"Patrick Whittle" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hey thanks Ace.
> If you're the Ace man, I'm the Whittler.
>
> PS whittler.com is already taken.
>

You are welcome. :-)

Why not try patrickwhittle.com?

Ace

Patrick Whittle wrote:
> I plan on letting a couple updates run, then after that, I don't want
> the pop-up anymore.
>
> "Bill Kearney" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) t...
>>
>> "NeilH" <(E-Mail Removed)> wrote in message
>> news:%23%(E-Mail Removed)...
>>>
>>> "Patrick Whittle" <(E-Mail Removed)> wrote in message
>>> news:(E-Mail Removed)...
>>>> Do you know of a way to prevent Windows Update from trying to go to
>>>> Microsoft, by using a firewall? My Windows 2003 Server wants to get
>>>> the
>>>> latest updates all the time, and I was thinking that I need to setup
>>>> a UDP
>>>> port to block Windows Update. Do you know what Windows Update uses?
>>> Isn't
>>>> it just a UDP port?
>>>>
>>>
>>> Am I missing something here? Why not just switch off Windows Update?
>>
>> There's two services it would use, automatic updates and BITS.
>> Disable those and you pretty much end updating.
>>
>> The question is, however, why would you want to disable getting
>> updates. Many are security oriented and well worth updating.
>>
>> -Bill Kearney
>

When you accept the "couple", why not decline the others? Just un-check
the update and you should be given the opportunity to hide them...

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services
http://mypcassistant.blogspot.com/

From now on I'm going to do my updates manually. I used 'net stop bits' and
'net stop wuauserv' to shutdown the update utility.

"Hank Arnold" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Patrick Whittle wrote:
>> I plan on letting a couple updates run, then after that, I don't want the
>> pop-up anymore.
>>
>> "Bill Kearney" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed) t...
>>>
>>> "NeilH" <(E-Mail Removed)> wrote in message
>>> news:%23%(E-Mail Removed)...
>>>>
>>>> "Patrick Whittle" <(E-Mail Removed)> wrote in message
>>>> news:(E-Mail Removed)...
>>>>> Do you know of a way to prevent Windows Update from trying to go to
>>>>> Microsoft, by using a firewall? My Windows 2003 Server wants to get
>>>>> the
>>>>> latest updates all the time, and I was thinking that I need to setup a
>>>>> UDP
>>>>> port to block Windows Update. Do you know what Windows Update uses?
>>>> Isn't
>>>>> it just a UDP port?
>>>>>
>>>>
>>>> Am I missing something here? Why not just switch off Windows Update?
>>>
>>> There's two services it would use, automatic updates and BITS. Disable
>>> those and you pretty much end updating.
>>>
>>> The question is, however, why would you want to disable getting updates.
>>> Many are security oriented and well worth updating.
>>>
>>> -Bill Kearney
>>
>
> When you accept the "couple", why not decline the others? Just un-check
> the update and you should be given the opportunity to hide them...
>
> --
>
> Regards,
> Hank Arnold
> Microsoft MVP
> Windows Server - Directory Services
> http://mypcassistant.blogspot.com/

"Patrick Whittle" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> From now on I'm going to do my updates manually. I used 'net stop bits'
> and
> 'net stop wuauserv' to shutdown the update utility.
>

You didn't have to stop any services. Simply RIGHT-CLICK MyComputer or
Computer, select Properties, Windows Update, Change settings, select to
NEVER CHECK FOR UPDATES. Then simply go to Windows Update and check for
updates, and select what you want to install.

Are you familiar with the differences and what some of the updates do for
you and your system when picking and choosing necessary updates?

Ace

I am familiar, and I usually look at the 'Importance' flag when deciding
weather to update or not.

"Ace Fekay [MCT]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Patrick Whittle" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> From now on I'm going to do my updates manually. I used 'net stop bits'
>> and
>> 'net stop wuauserv' to shutdown the update utility.
>>
>
> You didn't have to stop any services. Simply RIGHT-CLICK MyComputer or
> Computer, select Properties, Windows Update, Change settings, select to
> NEVER CHECK FOR UPDATES. Then simply go to Windows Update and check for
> updates, and select what you want to install.
>
> Are you familiar with the differences and what some of the updates do for
> you and your system when picking and choosing necessary updates?
>
> Ace
>