Can SUS be installed on a domain controller?
yes it can be installed
Windows Software Update Services (WSUS), is Microsoft's upcoming
free patch management tool. WSUS is essentially the next version of
Microsoft's free patch management tool, replacing Software Update
Services or SUS. WSUS provides a number of new features including
targeting of patches to specific groups of machines, support for
more produts (e.g Office), and improved reporting.
WSUS is a service you run inside your organisation - on one or
more servers which you configure to serve software updates to one
or more AU clients. You can configure a WSUS server to download
updates either from Microsoft or from another WSUS server within
your organisation. Once you approve an update for installation,
WSUS downloads it from configured upstream partner, and can then
issue these updates to clients that request it. You can approve any
update for some, all, or none of your computers. Once an update is
approved, the targeted WSUS clients download the update using the
Windows AU client. WSUS also provides reports on which clients
have, and have not, had which updates.
WSUS provides a capability that allows the Windows AU client to
obtain and install updates. However, it does not provide an
internal version of the Windows Update site, thus your users can
not navigate to your WSUS server and obtain updates (as they can
when they navigate to Microsoft's Windows Update site).
You administer WSUS from the WSUS administration console:
http://<WSUSServerName>:<port number>/WsusAdmin/. On
your WSUS server you can also click Start, point to All Programs,
point to Administrative Tools, and then click Microsoft Windows
Server Update Services.