Windows Admin Center – WSUS/SCCM Update Category Explained

When configuring Software Update Point (SUP) classifications and products in SCCM or WSUS, it’s easy to overlook some of the more specialised product categories—especially those that don’t directly relate to Windows OS or Office patching. One of these often-ignored categories is Windows Admin Center.

Although it may seem like a niche product category, enabling it can be essential for organisations that rely on Windows Admin Center (WAC) as part of their server and infrastructure management strategy.

Definition and purpose

Windows Admin Center (WAC) is Microsoft’s modern, browser-based management platform for:

• Windows Server (2012 R2 and later)
• Failover clusters
• Hyper-converged infrastructure (HCI)
• Azure Stack HCI
• Windows 10/11 endpoints (with limited tooling)

It is designed to replace or supplement legacy tools such as:

• Server Manager
• MMC snap-ins
• Hyper-V Manager
• Failover Cluster Manager
• Remote Server Administration Tools (RSAT)

Because WAC is an application, not a built-in OS component, Microsoft distributes its updates separately—hence the dedicated WSUS/SUP product category.

What the Windows Admin Center category covers

Enabling the Windows Admin Center product in WSUS/SCCM allows you to synchronise updates specifically for the WAC application. These updates typically include:

Security updates

• Patches for vulnerabilities within the WAC interface or its underlying services
• Hardening improvements to remote management endpoints
• Updates to secure communication between WAC and managed nodes

Feature updates

• New management extensions and tools
• Updated dashboards and UI improvements
• Support for new Windows Server builds or Azure integrations
• Enhancements to existing tools (e.g., Hyper-V, Storage Spaces Direct, DHCP, DNS)

Bug fixes

• Stability improvements and crash fixes
• Performance optimisations
• Fixes for module or extension issues
• Updates to gateway functionality and connectivity

Because WAC evolves rapidly, these updates can be frequent and significant, especially in environments that adopt new Windows Server or Azure capabilities early.

Why this category matters

1. Security

Windows Admin Center is a privileged management tool. If compromised, it could provide access to:

• Server configuration and roles
• Cluster and HCI management
• Virtual machines and storage
• Certificates and local security settings
• Local and domain accounts (depending on tools used)

Keeping WAC patched is critical for reducing the attack surface of your management plane.

2. Compatibility

New Windows Server builds, Azure integrations, and feature packs often require updated WAC modules. Running an outdated version can lead to:

• Missing or greyed-out features
• Broken dashboards or errors when loading tools
• Unsupported management tasks for newer OS versions

By keeping the Windows Admin Center category enabled and updated, you ensure that your management tooling keeps pace with your infrastructure.

3. Stability and reliability

For many admins, WAC becomes the central console for day-to-day management. Regular updates help ensure:

• Fewer crashes and UI glitches
• Better performance when loading tools and views
• Improved gateway reliability and connectivity
• More consistent remote management experiences

How Windows Admin Center updates are delivered

Windows Admin Center updates can be obtained through:

• Windows Update – for servers or workstations where WAC is installed
• WSUS/SCCM SUP – when the Windows Admin Center product category is enabled
• Manual download – via MSI from Microsoft’s download pages

Using SCCM to manage WAC updates gives you:

• Centralised approval and scheduling
• Deployment rings (pilot vs production)
• Compliance and reporting
• Controlled rollout across management servers and admin workstations

Configuring Windows Admin Center in SCCM SUP

To ensure SCCM synchronises and deploys Windows Admin Center updates, follow these steps:

1. Open the SCCM console

In the SCCM console, go to Administration → Site Configuration → Servers and Site System Roles.

2. Select the Software Update Point server

Select the server hosting the Software Update Point role.

3. Open Software Update Point Component Properties

Right-click the SUP role and choose Properties to open the Software Update Point Component Properties dialog.

4. Enable the Windows Admin Center product

Go to the Products tab and locate:

Windows Admin Center

Tick the checkbox next to Windows Admin Center to include these updates in the next synchronisation.

5. Synchronise software updates

After enabling the product, initiate a software update sync:

• Go to Software Library → Software Updates → All Software Updates
• In the ribbon, click Synchronize Software Updates

Once the sync completes, Windows Admin Center updates will appear in your update catalog and can be added to software update groups and deployments like any other update.

Best practices for managing WAC updates in SCCM

Use a dedicated collection

Windows Admin Center is usually installed on:

• Dedicated management servers
• Gateway servers
• Admin workstations

Create a dedicated device collection for these systems so you can target WAC updates precisely and avoid deploying them to general-purpose endpoints.

Deploy using rings

• Pilot ring – a small set of IT admin machines or non-critical management servers
• Production ring – core WAC gateways and primary management servers

This approach lets you validate new WAC builds before rolling them out widely.

Monitor release notes

WAC updates often introduce new tools, UI changes, or integration features. Reviewing release notes before deployment helps you:

• Understand new capabilities
• Spot breaking changes or deprecations
• Plan communication to your admin team

Plan for gateway availability

If you run WAC in gateway mode, treat it like any other critical management service:

• Update one gateway at a time if you have multiple
• Schedule maintenance windows
• Verify access after updates are applied

Summary

Enabling the Windows Admin Center product category in WSUS/SCCM ensures that your WAC installation receives:

• Security patches for the management plane
• Feature enhancements and new tooling
• Bug fixes and performance improvements
• Compatibility updates for new Windows Server and Azure features

Given WAC’s role as a centralised management platform for servers, clusters, and infrastructure, keeping it updated is essential for maintaining a secure, stable, and modern environment.

By correctly configuring the Windows Admin Center category in SCCM and integrating it into your normal update process, you ensure that your management tooling stays as current and robust as the systems it manages.