wsus sp3 on windows server 2008 r2

fstinc used Ask the Experts™
I have setup WSUS on Windows 2008 R2 and organized my directory objects and users like this:

My company (OU)
 -accounting (sub OU's)
 -User Computers
 -Disabled users

If i apply the WSUS policy to "My Company", Will that automatically apply it to all computers in "User computers"?  Because it's all under the main OU?

I left my servers out of this OU because I don't want to deploy WSUS to servers.  I left them in the default "computers" group.

Am I on the right path?
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

As long as inheritance isn't blocked, it will be inherited by "User Computers" OU.(and all other OUs).


How do I check for that
Some polices do not apply to default Computers class container. If you want to play it safe move the servers to another OU and block inheritance.
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

To apply a block, you can right click on an OU within GPMC and select your setting.
Open the Group Policy Management MMC under Windows 2008 R2. Navigate to the OU in the left pane.  Right-click on the OU and verify if "Block Inheritance" is checked (if not, then not blocking).  Also, select the "Group Policy Inheritance" in the tab on the right pane.


can the DC in the "domain controllers" OU be moved without creating any problems?
Microsoft does not support moving the DCs outside of their default location.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial