Get-windowsfeature -name Updateservices

When the command returns InstallState: Installed , it signifies that the server is acting as a SUS (Software Update Services) host. This implies:

During server hardening, unnecessary roles are stripped to reduce the attack surface. An auditor might run Get-WindowsFeature -Name UpdateServices on a server that is intended to be merely a client of WSUS (receiving updates) rather than a server (hosting updates). If this returns "Installed" on a standard application server, it represents an unnecessary security risk (unwanted IIS footprint, database surface area) that should be removed. get-windowsfeature -name updateservices

By noon, Alex had installed the WSUS role on the correctly named server, configured synchronization, and approved the critical patches. The 200 servers began reporting in. The PowerShell history showed the first step: When the command returns InstallState: Installed , it