How does WSUS work?
There are many components to WSUS, but basically it is a client/server application. The server piece is responsible for synchronizing with the Microsoft Update servers, providing those updates that are administratively approved to clients on campus, and logging transactions between the clients and the server. The client piece is responsible for querying the server to see if there are new updates available, downloading those updates, and then installing them on the administratively determined schedule. More specifically, a service runs on a server maintained by Information Technology (IT) that automatically synchronizes with the Microsoft Update servers. Updates that are digitally signed by Microsoft are downloaded to a local repository. Once the server has synchronized and downloaded new updates from Microsoft, they are ready to be approved. An administrator tests them and determines their suitability for campus. Suitable updates are approved on the server and at that point are ready f