• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1128
  • Last Modified:

WSUS over GPO

Whats the need of using WSUS if GPO can be set to have updates automatically download and install at a scheduled time. Besides the fact that GPO only deals with critical updates and that WSUS can micromanage each update individually and distribute.
0
rdvarghese
Asked:
rdvarghese
  • 3
  • 3
  • 2
  • +3
1 Solution
 
kmotawehCommented:
the wsus will install the updates to you from the microsoft's site and oofcourse that means that every client on your environment will have the updates through the lan not the wan so it's bandwidth and also through the wsus you can manage what updates the clients have to has and what are not
0
 
ChiefITCommented:
In my case, I use WSUS to save on bandwidth. I use a satellite to communicate with. I need all the bandwidth I can get. Instead of downloading the XP updates individually for each machine, WSUS downloads it once and pushes it to my XP clients. So, instead of 70 downloads, I only have one download. I just wish WSUS encompassed Java updates, Quick time updates and my Antivirus updates.

Using WSUS saves time and expense on downloading.
0
 
rdvargheseAuthor Commented:
CheifIT: Great answer. Have you setup WSUS 3.0 successfuly?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
geofmillCommented:
In addition to controlling bandwidth, you also get to choose the necessary updates - and exclude those not needed.  Leaving an indivudual workstation to manage its own updating can get messy.  
This also gives you the chance to test the updates.  As your environment gets more complicated, an ocassional update may interfer with other software or settings.  In an enterprise environment this ability can be invaluable.
That said, with every good comes some responsibilty.  The WSUS server needs to be managed on a regular basis as updates for O/S, applications, etc. are constantly being released.  You have to check them and then approve, or not, the updates - or they never get to their final destination.
0
 
FilipZahradnikCommented:
If correctly set up, WSUS also allows you to quickly see computers in your environment and what patches they have, what patches they need and whether any patches failed.

WSUS3 emails you a daily summary so you can see the progess of update rollouts.

You can categorize computers into groups and deploy updates selectively. E.g. first deploy to test group, then to production group and at last to server group.
0
 
rdvargheseAuthor Commented:
agreed. but i have tried wsus 3, and wasnt able to see any computers - has anyone successfully setup WSUS 3.0 - please include the challenges faced & Resolved on this latest version.
0
 
kmotawehCommented:
you have to change your group policy to change the clients to windows update from the local wsus before you can see any computers
0
 
geofmillCommented:
There are several steps that you need to follow.
Obviously you need to install the service on the WSUS Server.
Next, you need to setup a group poplicy that forces your clients to go to the WSUS Server, on the schedule that you select.
In the few cases where a machine does not show up, you need to do a local GPO that points to the WSUS Server.  Once it finds it, you can usually remove the policy and the domain policy will kick in.
The other thing to look out for in multiple instances of machines.  When I re-install, or change O/S on the clients, they often show as double entries.  ALl you need to do is delete the older ones.
0
 
ChiefITCommented:
Geof has it correct. You have to create a GPO to point the clients to the server instead of to autoupdates. I can see if I can find that information.
0
 
geofmillCommented:
You can find more information about the GPO options and setup at:
http://www.microsoft.com/technet/community/columns/sectip/st0506.mspx
and for information on receiving the wuau.adm template and how to use it:
http://technet2.microsoft.com/windowsserver/en/library/51c8a814-6665-4d50-a0d8-2ae27e69ca7c1033.mspx?mfr=true
0
 
JSoupCommented:
as anyone got it to work with vista without going to MS updates??
0
 
ChiefITCommented:
Jsoup:

Vista?
Not me, I have yet to play with Vista clients. I saw too many errors coming out from the beginning stages of Vista. Also my best friend, who is a software developer with a company of the initials of MS, told me not to play with Vista until it has a chance to have a good shake out of all the issues.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 3
  • 3
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now