• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 877
  • Last Modified:

WSUS creating test group then deploying patche to others later

I have Windows 2003 Servers and a mix of XP and Windows 7 clients.

I've just set up Wsus and want to create teh follwoing set up.
1 server, 1 XP client and 1 Win7 client get all approved updates automatically after patch tuesday. then one week later the remainder of the PCs and servers get the patchs.

as it stands I have a GPO set up as follows:
 Current Sus GPO settings for PCs
I have the following for Servers
 Current SUS GPO for Servers
I have creates an OU within teh Computers OU and placed one XP client and 1 Win7 clinet into it and teh same for teh Member Servers OU in AD.

I've then linked the PC GPO to the Test Pc OU and the Server GPO to the Test Server OU.

My understanding is then Every thursday at 17:00 my test PCs and Server will go to my sus server and download any approved updates approved for that group within SUS.

What I'm looking to do is create two more GPOs one for the remainder of my PCs and one for the remainder of my Servers that runs a week later. is it just a case of setting on up the test group for Wednesday night thus being the first to get the patches after patch tuesday and set a second GPO to schedule a download on say monday so they dont get the patches til almost a week later?

also how do you ensure that users cant keep defering reboots
0
faolchu
Asked:
faolchu
1 Solution
 
HarkinsCommented:
Hi faolchu,
I can't see any way of achieving what you want automatically. The only way I can see you doing this is by creating groups within WSUS for your test machines and all other machines, then use client side targeting to place the computers into the respective groups.
Once you have done that, you can modify the automatic approval rule in WSUS to only approve for your test group, then, after a week has passed, you will need to manually approve the updates for all the other computers.
HTH,
Harkins
0
 
faolchuAuthor Commented:
Cheers, pity there's no other way about it.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now