Using Windows Update Delivery Optimization in a local network | Ranjan.info

you can use Windows Update Delivery Optimization (WUDO.)) to distribute Windows Update (obtained via Windows Update or WSUS) and Configuration Manager packages in Windows 10 more efficiently across corporate networks with multiple sites/branches. Thanks to the use of Delivery Optimization, you can significantly reduce the traffic and channel load at your branch offices while deploying updates/packages.

In this article, we will see how to configure Delivery Optimization in Windows 10 and 11 to optimize Windows Update, WSUS and SCCM traffic on an enterprise LAN.

How to Enable Delivery Optimization in Windows 10 or 11?

Distribution optimization is enabled in all Windows 10 (build 1511 and newer) and Windows 11 versions. By default, it is only allowed to receive files from computers in the current local network (LAN).

Distribution optimization settings are available under Settings -> Windows Update -> Advanced Options -> delivery optimization,

As you can see, there are only two options available:

• allow download from other pc – Enables or disables delivery optimization
• allow download from: Devices on My Local Network / Devices on the Internet and My Local Network – Allows you to specify whether it is allowed to receive files from other devices on the Internet or only from devices on the local network.

Delivery Optimization Service (DoSvc) is used for delivery optimization features on the client side. By default, the service is enabled and configured to start automatically:

Get-Service dosvc|Select-Object -Property Name,Status,StartType

Configuring Delivery Optimization via GPO

Advanced distribution customization settings are located under Computer Configuration -> Administrative Templates -> Windows Components -> Distribution Customization section of Group Policy Editor.

To force delivery optimization on the Windows client, acceptable position policy is used. The most commonly used values ​​are:

• LAN(1) – HTTP peering behind the same NAT — recommended if all your computers are on the same LAN;
• group(2) – mixed HTTP with peering in a private group — Used in large networks consisting of multiple segments connected by a WAN link. Domains and AD sites can be used as network boundaries

you can use group Policy option for creating update distribution groups in your network. For example, by using GPO you can assign a unique GUID to the computers in each OU. Computers with the same GUID will receive updates only from computers with this GUID (that is, those in the same LAN without loading channels between sites). To generate a unique GUID, use the PowerShell command:

http://woshub.com/?p=12501::NewGuid()

Or you can force the WUDO group to Active Directory sites using Select the source of the group ID = AD Site Policy.

A Windows device is working as a Delivery Optimization Network Peer if it has at least 4GB of RAM and 32GB of free space on the disk. You can change these settings via a GPO:

• Minimum disk size allowed to use peer caching (in GB)
• Minimum RAM capacity (inclusive) required to enable peer caching (in GB)

By default, distribution optimization is not working on devices connected to your network over VPN. To allow the VPN client to receive updates using delivery optimization, check the option Enable peer caching while the device is connected to a VPN,

Using Distribution Optimization to Optimize WSUS Traffic

Delivery optimization is supported automatically for updates on WSUS servers. Create a regular GPO and assign it to your client to receive updates from your WSUS.

After scanning WSUS for updates, the client tries to find an update file in the client’s cache in your LAN. To do this, it accesses the cloud WUDO service (over HTTP/HTTPS) and asks if there is a file with a certain hash on the computer on the same LAN.

If the file is found, the client contacts the delivery optimization service on the neighboring computer (port 7680) and starts downloading the file using BITS.

How to use Distribution Optimization in Configuration Manager (SCCM)?

ConfigMgr 1910 and later supports distribution customization to distribute updates and packages across networks.

Like branch cache, delivery optimization is based on group boundaries. enable Allow peer downloads in this range group Option in setting group limits.

Enable two options in the Configuration Manager client’s settings:

• In delivery optimization section, enable Use Configuration Manager Limit Groups to Customize Distribution for Group IDs
• In the Software Update section, enable Let customers download Delta content when it’s available

If Delivery Optimization is enabled and peers containing relevant content are found within limits, Windows will download all file types from peers, regardless of the ConfigMGR client.

Optimization Delivery Statistics in Windows

You can get statistics about receiving files and updates via Delivery Optimization Activity Monitor ,Adjustment , Updates and Security , delivery optimization) Here you can see how much traffic your computer received from various delivery optimization sources and with whom it shared files.

To view Delivery Optimization statistics, you can also use PowerShell.

Here is the order to get normal distribution optimization statistics (how many files were downloaded or uploaded, their size, peer effectiveness):

Get-DeliveryOptimizationPerfSnap

Show detailed information on current delivery optimization tasks:

Get-DeliveryOptimizationStatus | ft

The cmdlet displays information about all the files received by the computer. You can view the file size, percentage of the received file using DO (PercentPeerCaching), etc.

By using the command below, you can get information about connected peers:

Get-DeliveryOptimizationStatus –PeerInfo

You can view last month’s delivery optimization statistics on your device:

Get-DeliveryOptimizationPerfSnapThisMonth

Delivery optimization is most effective in companies with multiple branches connected to a central WSUS/SCCM infrastructure using WAN links. In addition, distribution optimization allows the use of WSUS replicas or SCCM distribution points (DPs) in remote offices to be switched off.