Creating the Perform Windows Update synchronization task

The Perform Windows Update synchronization task is only available under the Vulnerability and patch management license.

The Perform Windows Update synchronization task is required if you want to use the Administration Server as a WSUS server. In this case, the Administration Server downloads Windows updates to the database, and provides the updates to Windows Update on client devices, in the centralized mode through Network Agents. If the network does not use a WSUS server, each client device downloads Microsoft updates from external servers independently.

The Perform Windows Update synchronization task only downloads metadata from Microsoft servers. Kaspersky Security Center downloads the updates when you run an update installation task and only those updates that you select for installation.

When running the Perform Windows Update synchronization task, the application receives a list of current updates from a Microsoft update server. Next, Kaspersky Security Center compiles a list of updates that have become outdated. At the next start of the Find vulnerabilities and required updates task, Kaspersky Security Center flags all outdated updates and sets the deletion time for them. At the next start of the Perform Windows Update synchronization task, all updates flagged for deletion 30 days ago are deleted. Kaspersky Security Center also checks for outdated updates that were flagged for deletion more than 180 days ago, and then deletes those older updates.

When the Perform Windows Update synchronization task completes and outdated updates are deleted, the database may still have the hash codes pertaining to the files of deleted updates, as well as corresponding files in the %AllUsersProfile%\Application Data\KasperskyLab\adminkit\1093\.working\wusfiles files (if they were downloaded earlier). You can run the Administration Server maintenance task to delete these outdated records from the database and corresponding files.

To create the Perform Windows Update synchronization task:

In the main menu, go to Assets (Devices) → Tasks.
Click Add.
The New task wizard starts. Follow the steps of the wizard.
For the Kaspersky Security Center application, select the Perform Windows Update synchronization task type.
Specify the name for the task that you are creating. A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
Enable the Download express installation files option if you want the express update files to be downloaded when running the task.
When Kaspersky Security Center synchronizes updates with Microsoft Windows Update Servers, information about all files is saved in the Administration Server database. All files required for an update are also downloaded to the drive during interaction with the Windows Update Agent. In particular, Kaspersky Security Center saves information about express update files to the database and downloads them when necessary. Downloading express update files leads to decreased free space on the drive.

To avoid a decrease in disk space volume and to reduce traffic, disable the Download express installation files option.
Select the applications for which you want to download updates.
If the All applications check box is selected, updates will be downloaded for all existing applications, and for all applications that may be released in the future.
Select the categories of updates that you want to download to the Administration Server.
If the All categories check box is selected, updates will be downloaded for all existing updates categories, and for all categories that may appear in the future.
Select the localization languages for the updates that you want to download to the Administration Server. Select one of the following options:
- Download all languages, including new ones
  If this option is selected, all the available localization languages of updates will be downloaded to Administration Server. By default, this option is selected.
- Download selected languages
  If this option is selected, you can select from the list localization languages of updates that should be downloaded to Administration Server.
Specify which account to use when running the task. Select one of the following options:
- Default account
  The task will be run under the same account as the application that performs this task.
  
  By default, this option is selected.
- Specify account
  Fill in the Account and Password fields to specify the details of an account under which the task is run. The account must have sufficient rights for this task.
If you want to modify the default task settings, enable the Open task details when creation is complete option on the Finish task creation page. If you do not enable this option, the task is created with the default settings. You can modify the default settings later, at any time.
Click the Finish button.
The task is created and displayed in the list of tasks.
Click the name of the created task to open the task properties window.
In the task properties window, specify the general task settings according to your needs.
Click the Save button.

The task is created and configured.