Solved

Windows Updates

Posted on 2012-04-10
3
306 Views
Last Modified: 2012-06-21
Hi,

I have 200 user network with mixture of xp, and windows 7 pcs.  We have 2 forests that are 2 way trusted.

I used to use gfi languard, until it decided to deploy windows updates during the day and reboot all of our machines!

can you please recommend what is the best, and/or if WSUS can be deployed over a trust.

Thanks

Phil
0
Comment
Question by:philipfarnes
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37827851
Look over


Secure the WSUS 3.0 SP2 Deployment
http://technet.microsoft.com/en-us/library/dd939849%28v=ws.10%29.aspx
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 37827882
Damn reboot all machines during the day had to suck.  Yes you can use WSUS,  it can be done across forests but I won't blow smoke, in a single domain right now (80k users) but we don't go across forests.

You will use a GPO on your clients   http://technet.microsoft.com/en-us/library/cc708536(v=ws.10).aspx

As you can see you can schedule the install.  Having said that we still patch critical servers manually (exchange for example)

Thanks

Mike
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 37832749
Any reason why my comment wasnt considered??????

Question>> "...what is the best, and/or if WSUS can be deployed over a trust."

Answer>> "Secure the WSUS 3.0 SP2 Deployment"
http://technet.microsoft.com/en-us/library/dd939849%28v=ws.10%29.aspx

Add authentication for connected WSUS servers in an Active Directory environment

You can add authentication for server-to-server synchronization in an Active Directory environment. If the WSUS servers are located in different forests, a trust between the forests must exist for this authentication method to succeed.

To enable server-to-server synchronization, follow these steps:

    Create and add a list of approved WSUS servers to the Web.config file

    Disable anonymous access to the WSUS server
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question