[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 233
  • Last Modified:

A few WSUS questions

Hi Guys,

i've got round to setting up WSUS on our network, and i just have a few questions about it. I have created a test container with all the standard settings that WSUS needs to get it to work. I can see the computer in WSUS and it says that there are updates that it needs, but just says "!status - needed" and on the client machine, it says that there are new updates ready to install. Is there anyway to automate this? Are there other GP settings that i need to change/modify?

another query i have is about approving updates. I've selected what components i want WSUS to download, but is there a rule when it comes to approving them? or should i just approve them all!

I am going round the whole company and rebuilding each machine, then putting them into this new container with WSUS. Is this the right way to go about it.

Thanks for all your help.

Gavin
0
Gavin5511
Asked:
Gavin5511
  • 3
1 Solution
 
TheCleanerCommented:
There are Group policy settings under the computer configuration portions of GPOs that will need to be set.  They are under the Windows Updates section.  This will allow automatic updates to happen through the WSUS server.  See here:  http://technet2.microsoft.com/WindowsServer/en/Library/51c8a814-6665-4d50-a0d8-2ae27e69ca7c1033.mspx?mfr=true

I would approve critical updates, but any other updates I personally don't approve unless I've tested them and have a reason for adding them.

As far as WSUS "containers" go...I create one for each type of OS, then one for "testing".  But that's up to you.
0
 
Gavin5511Author Commented:
Excellent, thanks for that! we only use one operating system in the company, but thats a great idea creating a "test" OU for it.

will that website teach me how to make updates invisible to the user? will it be in this section where you can prevent users from being able to accept or decline the installtion of updates, and the ability to access the "windows update" option on the start menu?
0
 
TheCleanerCommented:
Well, it's not a test "OU" it is a test container INSIDE wsus (computer groups in the admin webpage).

Yes...that's correct...on the GPO settings all is listed on that page.  For making updates invisible...it will install them invisibly but may need a reboot, in which case you can set the option in group policy to either reboot it or ask the user to reboot.  The users cannot "decline" the installation of the update...you will set that in WSUS console and that's what they'll get.  And the bottom option on that page shows how to disable them from access Windows Update on their own.
0
 
TheCleanerCommented:
Thank you for the points!
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now