(500 Points) WSUS question

Posted on 2005-05-12
Last Modified: 2012-05-05
Hi Experts,

We are running WSUS in our environment, and it seems to be running good. Recently I have created two groups in WSUS console, one name Workstations, and the other one Named Servers.

I change the client targeting in the group policy, and it worked good, but now I have one question:

Can I choose different updates for each group?
Because I am going to approve some updates for workstation that I may not approve for the servers.

I really appreciate all comments.

Thanks guys
Question by:mjalmassud
    LVL 6

    Accepted Solution


    I think this will need two SUS server to perform ur request,
    one sus for client computer,another for server,
    and also u need create another Group Policy to apply server,
    and uncheck the default domain policy of Authenticated users can apply it,just add the group of client computer.
    the server need to do so.

    LVL 10

    Assisted Solution

    The WUS servers check the OS before deployment, that is how SUS did it.

    Expert Comment

    The short answer is yes you can easily do this.  once you log into the WSUSadmin page of your WSUS server go to the "updates" page then you can change approvals for each update only allowing it to only be install in the groups you want or on all groups. On windows 2003/2000 server all you need is one Group Policy Object because it's ultimately the WSUS server that decides who gets what updates but the GPO needs to be set up to allow unattended installations of updates and sets check-in time with the server.

    hopefully this helps

    Expert Comment

    You are right yogi420.

    I wish you answered the question quicker than that, because I had to install another wsus server, and also accepted another answer already.

    but thank you so much.

    Expert Comment

    I have installed WSUS and everything has gone smoothly.  All of my computers Win2kPro/WinXPPro took the settings of the OU and where pointed to my server with WSUS installed.  The problem I have run into, is that we had to rename a machine and the Comp Name didn't change in WSUS.  I removed the computer but, can't get the computer with the new name to show back up in WSUS for the life of me.  Any ideas???

    Expert Comment

    sorry, I meant to post.  Disregard!

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    Suggested Solutions

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now