How can you configure Windows Server 2019 to automatically apply updates?

1 Windows Update service

The Windows Update service is the default option for managing updates on Windows Server 2019. Accessible from the Settings app, under Update & Security, it allows you to check for updates, view the update history, and configure how updates are installed and delivered. To configure Windows Server 2019 to automatically apply updates, you can select Automatic (recommended) to install all updates or Automatic (user initiated) to install only critical updates automatically and defer other updates. You can also choose a specific day and time for the update installation or let Windows choose a suitable time based on your usage patterns. Additionally, you can enable or disable the delivery optimization feature which allows your server to download updates from other devices and share them with them, reducing bandwidth consumption and speeding up the update process. However, it has some limitations such as not being able to control which updates are installed or declined without using the Group Policy Editor or Registry Editor, not being able to monitor or report the update status of your server or other servers in your network, and not being able to deploy updates to other servers or devices in your network unless you use the Windows Update for Business feature.

2 Windows Server Update Services

The Windows Server Update Services (WSUS) role is a great alternative for managing updates on Windows Server 2019. It allows you to create a local update server that can download updates from Microsoft or another WSUS server, and distribute them to other servers and devices in your network. You can access it from the Server Manager, under Tools, and configure WSUS settings, approve or decline updates, and monitor or report the update status of your server or other servers and devices. To configure Windows Server 2019 to automatically apply updates using WSUS, you need to install the WSUS role on your server, using the Add Roles and Features Wizard or the PowerShell cmdlet Install-WindowsFeature -Name UpdateServices , configure the WSUS role, create a group policy to enable the Configure Automatic Updates policy, and apply the update policy to your server or other servers and devices.

The WSUS role is more flexible and powerful than the Windows Update service. It has some advantages, such as allowing you to control which updates are installed or declined based on your criteria and preferences, monitor or report the update status of your server or other servers and devices, deploy updates to other servers or devices in your network, and reduce bandwidth consumption by using a local update server instead of an internet connection. However, it also has some disadvantages, such as requiring you to install and configure an additional role on your server, create and apply a group policy to your server or other servers and devices, as well as approve or decline updates manually or using a script.