Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

A few WSUS questions

Posted on 2006-07-18
4
Medium Priority
?
226 Views
Last Modified: 2010-04-18
Hi Guys,

i've got round to setting up WSUS on our network, and i just have a few questions about it. I have created a test container with all the standard settings that WSUS needs to get it to work. I can see the computer in WSUS and it says that there are updates that it needs, but just says "!status - needed" and on the client machine, it says that there are new updates ready to install. Is there anyway to automate this? Are there other GP settings that i need to change/modify?

another query i have is about approving updates. I've selected what components i want WSUS to download, but is there a rule when it comes to approving them? or should i just approve them all!

I am going round the whole company and rebuilding each machine, then putting them into this new container with WSUS. Is this the right way to go about it.

Thanks for all your help.

Gavin
0
Comment
Question by:Gavin5511
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 23

Accepted Solution

by:
TheCleaner earned 2000 total points
ID: 17130346
There are Group policy settings under the computer configuration portions of GPOs that will need to be set.  They are under the Windows Updates section.  This will allow automatic updates to happen through the WSUS server.  See here:  http://technet2.microsoft.com/WindowsServer/en/Library/51c8a814-6665-4d50-a0d8-2ae27e69ca7c1033.mspx?mfr=true

I would approve critical updates, but any other updates I personally don't approve unless I've tested them and have a reason for adding them.

As far as WSUS "containers" go...I create one for each type of OS, then one for "testing".  But that's up to you.
0
 
LVL 1

Author Comment

by:Gavin5511
ID: 17130797
Excellent, thanks for that! we only use one operating system in the company, but thats a great idea creating a "test" OU for it.

will that website teach me how to make updates invisible to the user? will it be in this section where you can prevent users from being able to accept or decline the installtion of updates, and the ability to access the "windows update" option on the start menu?
0
 
LVL 23

Expert Comment

by:TheCleaner
ID: 17132067
Well, it's not a test "OU" it is a test container INSIDE wsus (computer groups in the admin webpage).

Yes...that's correct...on the GPO settings all is listed on that page.  For making updates invisible...it will install them invisibly but may need a reboot, in which case you can set the option in group policy to either reboot it or ask the user to reboot.  The users cannot "decline" the installation of the update...you will set that in WSUS console and that's what they'll get.  And the bottom option on that page shows how to disable them from access Windows Update on their own.
0
 
LVL 23

Expert Comment

by:TheCleaner
ID: 17137982
Thank you for the points!
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam® is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question