Just had an issue today where I approved WSUS updates for maintenance and came to the realisation that as soon as you approve new updates WSUS automatically begins to download them. Here I am trying to isolate why the browsing internet, reviewed the gateway, noted download traffic was massive from the WSUS server, logged on and noticed…. akamai.
Yep, I didn’t even realise (noob I know) but I’ve found a way to manage the downloads by WSUS (and other Microsoft services that are chucking a sneaky). BITS is a sneaky little service that most people may not even realise is affecting the performance of their internet use. Here’s an acrostic poem I prepared earlier:
All we need to do is throttle the amount of bandwidth the service uses during a certain time frame.
- Open Group Policy Management
- Browse to Computer Configuration > Policies > Administrative Templates > Network > Background Intelligent Transfer Serice
- Double click Limit the maximum network bandwidth for BITS background transfers
- Enable the settings and configure as per your requirements
- Hit OK, associate the GPO to your WSUS server.
- If you want it to take effect immediately, logon to the WSUS server and run a gpupdate /force
- You’ll notice the bandwidth utilisation drop within seconds.
TL;DR: Configure GPO to throttle BITS utilisation and force update on WSUS server.