Re: GPO setting for Auto update in WSUS3 SP1

Tech-Archive recommends: Fix windows errors by optimizing your registry

DD,

DD wrote:
I need to automatically update all windows patches on all clients. Other than the Option 4 with schedule restart and Immediate update settings on GPO what else is essential to configure in the group policy and on WSUS3 server to achive the above result.

Use the internal location-policy to specify the WSUS's IP and port the clients need to connect to. Also make sure you have a reasonable scan interval for those updates.

Depending on how you're going to manage WSUS, you can use multiple GPOs and link them to several OUs - and use the group targetting to move all machines from one OU to a specific WSUS group. Otherwise all machines will - once they contacted the WSUS server the first time - land in "All Computers" group.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
.

Relevant Pages

  • Re: Group policy for WSUS
    ... You would have to first decide how to target the accounts, then in WSUS, create target groups, create a separate GPO for each, and a separate OU for each, and apply for example, the "Desktop WSUS GPO" to the Desktop OU, etc. ... Update and Configure the Client ComputersTo configure Automatic Updates, create a new Group Policy object for WSUS settings and then link that GPO on the domain level. ...
    (microsoft.public.windows.server.active_directory)
  • WSUS GPO not being applied
    ... group policy. ... Using gpresult the gpo I've created gets applied ok for a few user settings but computer settings for wsus is listed as neither applied or denied. ...
    (microsoft.public.windows.group_policy)
  • Re: WSUS port issue
    ... then nothing would be needed to be changed in group policy. ... One; the GPO isn't applying. ... When we upgraded them from SUS to WSUS and modified the GPO's the clients ...
    (microsoft.public.windows.server.sbs)
  • Old WSUS server parameters reappearing on workstation.. rsop error (GPO related)?
    ... I have a vista x64 machine which seems to be getting an old WSUS ... address (which at one point was in our GPO, ... not the new server name and port.. ... This appears to be a group policy issue, rather than a WSUS issue per ...
    (microsoft.public.windows.server.general)
  • Re: Using Group Policy to give install permission
    ... Group Policy is simply (well, ... Active Directory there is only one Organizational Unit: ... Your user account objects or computer account objects must directly reside ... in the Organizational Unit to which you linked the GPO. ...
    (microsoft.public.win2000.group_policy)