Windows Software Update Server question.

Posted on 2007-09-28
Last Modified: 2010-04-18
We have internal WSUS servers to distribute patches approved by our IT to all PCs.  We also have a group of laptops used by our senior management which they do not connect to the LAN periodically; sometimes once in a long while and they login to our domain.  

Just want to see if anyone has some suggestions for these laptops?
Question by:search5354
    LVL 19

    Accepted Solution

    Depends on how stringent you are about having patches installed sooner than later. Obviously, when and if they do log into the domain they'll eventually get the updates.

    Personally - I would probably leave it as is and let them get the updates when they log in; just so all PCs are controlled by WSUS and it's easier to keep track of. If a critical patch is released you'd know to have them manually get it installed.

    Or you could not apply the GPO with WSUS settings to these laptops and just configure the local policy to use the Windows Update site....with the same install settings you're WSUS is using (automatic install, download and notify, etc...)
    LVL 3

    Assisted Solution

    I agree with above, I have many laptops in my organization that I call roaming, these laptops are given the same settings as my clients here at my HQ because when they VPN in to the network they reside in HQ to the domain at the site level.

    It is a little much to ask I know, but I prefer to have as much automation as possible so when people receive their laptops I request that they at least try and connect their laptops while at home to the VPN and leave them on overnight so that they will process udpates.

    Through many many moths of tracking this, I have never seen the laptops not report in more than 7 days and never been below 92% of installed updates at any given time.

    Author Comment

    Thanks both.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now