To address computer security issues, IST recommends all computers on the Bannatyne and Fort Garry campus:
Operating system patches can be acquired from several sources, including Microsoft's Windows Update site. However, for machines running Windows 2000, Windows XP, and Windows Vista and Windows 7 (see notes following), IST has implemented a Windows System Update Server (WSUS).
WSUS provides software updates for Microsoft Windows operating systems. By using our WSUS Server, administrators are able to fully manage the distribution of updates released through Automatic Updates.
The WSUS server maintains automatic installs of patches and updates that have been approved by IST for our university computers. After a computer has been configured for WSUS, we ask that you never use Windows Update. Even though Windows Update is still available, it may install updates that have not been recommended by the University.
How you benefit from our WSUS Server:
Configuring your machine to acquire updates from the University of Manitoba WSUS
The following instructions will assist you in configuring your computer to obtain Windows updates through the WSUS at The University of Manitoba. Prior to proceeding with these steps, please contact your container administrator, work group manager or departmental computer representative. This individual may have already prepared your machine for receiving updates via the University of Manitoba WSUS server.
To download this update file, right click on the following link and choose Save or Save link as: umWSUS-inst.reg
Then choose a location to save this file to and click OK. To start the installation, browse to the location you save the file to and then double click on the file.
Select Yes when asked if you want the information added to the registry.
Once your computer has been configured to automatically check for updates. It will check for new updates from the WSUS approximately once every 24 hours and after rebooting.
When your computer requires an update, it will automatically download the updates. Then at the scheduled time, 12pm noon, the update will be installed. If your computer requires a reboot a dialogue window asking whether you would like to postpone rebooting will appear and remain until your preference is given. This dialogue window will reappear approximately every 5 minutes until you do reboot.
For a more detailed discussion of WSUS please visit:
Microsoft's Software Update Services Deployment White Paper
Manually creating the reg file
While not recommended, you can use RegEdit to manually enter the relevant options into the Windows Registry.
To change the appropriate registry keys, we recommend downloading the file umWSUS-inst.reg as describe above or follow the below steps to create your own:
Copy the text below into Notepad (or any text editor). Please copy the text exactly and be sure to leave the quotes and save the file as a text file.
Save this as “umWSUS-inst.reg”.
Install the keys by double clicking on the umWSUS-inst.reg file icon. You will be warned that the registry will be modified. Click on Yes to add the information to the registry.
Your computer is now configured and should be contacting the WSUS server for updates.
Key configurationA detailed explanation of what each of the key does now follows.
HTTP URL of the WSUS server used by Automatic Updates and (by default) API callers; This points to the UofM's WSUS Server
The HTTP URL of the server to which reporting information will be sent for client computers that use the WSUS server configured by the WUServer key; This points to the UofM's WSUS Server
Determines the use of client-side targeting. This is disabled
This is set so that only users in the Administrators user group can approve or disapprove updates.
This is set to 0; Enable Automatic Updates.
This is set to 4; Automatically download and schedule installation
This is set to 0; Every day
This is set to 0xC; 12:00pm; Noon
This is set to 1; Logged-on user gets to choose whether or not to restart his or her computer.
This determines whether or not Automatic Updates should wait at startup before applying updates from a missed scheduled installation time.
Time, in minutes, that Automatic Updates should wait at startup before applying updates from a missed scheduled installation time.
This determines whether or not DetectionFrequency is enabled and in this case it is.
Time between detection cycles. This is set to 22 hours.
This is set to 1; silently install minor updates. This will install updates that do not require a system restart immediately.
This is set to 0; Disable custom RebootWarningTimeout (the default value of 5 minutes is used).
This is set to 0; Disable custom RebootRelaunchTimeout (the default value of 10 minutes is used).
This key is set to 1; enabled. The WUServer is not used unless this key is set.