Re: Understanding WSUS

Hi Rick -

What I do is create two separate GPOs to control WSUS updates. The first
GPO is linked to the My Business | Computers | SBSComputers OU (where the
client machine accounts live by default), and has Configure Automatic
Updates enabled and configured for level 4: Auto download and schedule the
install.

The second GPO is linked to the Domain Controllers OU (where our SBS machine
account lives), and has the Configure Automatic Updates enabled and
configured for level 3: Auto download & notify for install.

SO - when updates are approved for installation via the WSUS console,
clients will pull these down and install them automatically at the time
specified in their GPO. The SBS on the other hand will simply download the
patches locally, and will give you that little balloon 'Updates are ready to
install' when you log in. Therefore, you can control when the patches are
installed on the server . . .

--

Chad A. Gross - SBS MVP
SBS ROCKS!

http://msmvps.com/cgross


.

Relevant Pages

  • Re: Windows XP Service Pack 2
    ... > MS-MVP Windows - Shell/User ... > | will have improved control and reporting of update delivery also. ... > | It sounds to me like you should get comfortable with using GPO ... > |> this apart from the traveling users that now pull their updates across ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Install the ActiveX control required to view the website
    ... study this part about gettin the Active X control and the BITS. ... looks for updates but goes on and on until I get the error message number ... iuengine and yes I can install the active x Once only. ... click Install ActiveX Control. ...
    (microsoft.public.windowsupdate)
  • Re: AD GPO & Windows Update
    ... > one of the Central Services Servers and GPO has been set up to point at ... Have you proven that GPO is applied? ... > Updates still do not happen and when we try and run Updates from a ... for Win2000 machines you must install the AU Client but ...
    (microsoft.public.win2000.active_directory)
  • Re: Automatic update - GPO not working
    ... windows update at 21:00 each evening. ... I've applied the GPO to an OU ... Configure Automatic Updates Enabled ... Scheduled install day: 0 - Every day ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automatic update - GPO not working
    ... Link your GPO to a OU that contains the computer accounts. ... windows update at 21:00 each evening. ... Configure Automatic Updates Enabled ... Scheduled install day: 0 - Every day ...
    (microsoft.public.windows.server.active_directory)