Because of limited bandwidth in our lan, we are forced to turn off WSUS in working hours and turning it back after working hours.
I found a simple solution how to “Schedule” WSUS synchronization after working hours.

In our Firewall we made a rule to disable the port through which downloading updates.

In Task Schedule we made task with trigger at 7 PM and set Action to start “netsh” and argumnet:

 advfirewall firewall set rule name="FW_rule name" new enable=Yes 

Then we made another one to disable the rule in 16 AM, with argument:

 advfirewall firewall set rule name="FW_rule name" new enable=no 

task

Advertisements