Do you need CAL's for a WSUS server?

[The_Librarian]

As the title says...

Clients won't be accessing the server for any file/print sharing, but they will only get WSUS updates as well as Symantec Endpoint Protection updates from said server.

Regards

Ook

[thisgeek]

Wouldn't think so, since WSUS works via http and https.
But then IANAL. :p

[ramar]

I would say yes, you will need CALS for each client connecting to do updates if it is in an AD environment, unless the WSUS server is on server 2003/8 Web edition.

From Microsoft:

What are the licensing requirements for SUS or WSUS?
A.

SUS and WSUS are components of Windows 2000 Server, Windows Server 2003, Small Business Server 2000 and Windows Small Business Server 2003. Consequently, SUS is, and WSUS will be, available at no additional charge to licensees of these products.

SUS and WSUS do not have their own client access license (CAL). However, when you are updating your computers that run SUS and WSUS, you will need to access the server on which the SUS or WSUS server component runs, and therefore each computer requires a Windows or Core CAL. Note that this is a licensing requirement for the Windows Server on which the SUS or WSUS server is running, and not a licensing requirement specific to SUS or WSUS.

The general exceptions to this CAL licensing requirement for Windows Server are:

When the access is through the Internet and unauthenticated.
When the service being accessed can be run on Windows Server 2003 Web Edition (that is, the service and the way in which it is used meet the requirements specified in the product use rights for Windows Server 2003 Web Edition).

Because computers that are updated using SUS or WSUS access the SUS or WSUS server through the organization's internal network, the first exception does not apply to use of SUS or WSUS.

The second exception is applicable when SUS is used and the SUS server is running on Windows Server 2003, Web Edition.

The second exception is applicable when WSUS is used if the WSUS server is running on Windows Server 2003, Web Edition, and the WSUS database is using the default built-in WSUS database or an MSDE database installed on the same computer. Using a remote database invalidates this exception.

To summarize, if you are updating your computers using a SUS or WSUS server running on Windows Server 2003, Web Edition, and you are not using a remote database for the WSUS server, no CALs are required to update these computers. In all other situations, you need a Windows or Core CAL for each computer running WSUS or SUS that you are updating.

[PsyWulf]

From a technical perspective no,from a licensing perspective - see above

[Park@82]

well that kinda sucks, did not know.

[The_Librarian]

Lekker geldmaakmasjien...

[bubbatentoe]

If you run WSUS on SQL Server then you need SQL Server license + CALS.
If you run WSUS on SQL Express then you don't need any CALS.

Everyone I've met runs it on SQL Express.
Works perfectly.