Solved

Client side targeting WSUS, GPO.

Posted on 2010-09-23
2
1,025 Views
Last Modified: 2012-05-10
Gents,

I have installed WSUS on a Server 2003 and it has downloaded all updates. I have created 2 computer groups in WSUS one called "Clients" and another "Servers". I want to use client side targeting system through GPO for computers to add themselves in to WSUS and it's respective groups. The explanatory text of the GPO explains that you can add multiple groups by separating them with  a semicolon.... My question is how will the GPO decide what machine goes in to what WSUS computer group? there are no filters based on OS or other settings to specify this... I have read on a few forums saying that all computers will be moved in to all WSUS computer groups if GPO is Linked to Default Domain Policy. It seems like the only way is to create seperate GPO's and link to separate OU's? or do one of you experts have a few tricks up there sleve? maybe WMI?? which i'm not good at by the way...

Thought MS would create this a to be bit more automated : )

Thanks in Advanced

PS: If WMI through GPO is the solution we have XP, W7, 2003, and down the track 2008
0
Comment
Question by:WeirdFishes
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 33750411
If you want to assign computers to more than one group you use the semi colon approach, if you want to assign to different groups you will need a separate GPO.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 33750422
I like to use one GPO for desktops/clients for WSUS, and another for Servers. Use option 4 for the desktops and either option 2 or 3 for servers. Then you use a different client side target group for each GPO.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
Invest in your employees with these five simple steps to improve employee engagement and retention.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question