Daemon Deployment

The Software Distribution Daemon has to be installed and configured to publish patches as software updates to WSUS. It runs as a background service with no user interaction. It doesn't have to be installed on the WSUS server, but the host must be the exact same operating system version and patch level.

The account that runs the Daemon must have:

Run-as Service privileges
Windows Server Update Services Administrator privileges

This section details the following daemon deployment activities:

Install the Daemon
Add a Digital Certificate to Windows Server Update Services (WSUS)
Create a Group Policy to Deploy Your Certificate