Solved

Windows Updates throuh GPO

Posted on 2013-06-26
4
275 Views
Last Modified: 2013-08-07
We have a GPO configure which points to our WSUS Server for clients to receive updates on there computers ...

How do i configure my GPO so that if a Computer cannot contact the WSUS Server, then it should directly download the updates from Microsoft.

This is for our remote users who are out of office usually months a t a time
0
Comment
Question by:oasisuk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 500 total points
ID: 39278730
You would have to configure a second WSUS server that is configured to *NOT* store updates locally.  Then point these clients to that WSUS server. Then when they are connected to the network they will get their approvals and will always download from Microsoft.
0
 
LVL 18

Expert Comment

by:Mike T
ID: 39282952
Hi,

For WSUS 3 only you can configure the following GPO as described here.
The down-side is I think it would be an all or nothing affair with no control over approvals, i.e. what patches get installed.

A workaround as the expert mentions, is to configure another WSUS but it's then two servers to manage and could get messy.


Note, for WSUS 2 I will quote Lawrence Garvin a WSUS MVP
"There is no facility for either/or, or a 'fallback' scenario in WSUS v2.

 The best you can do is disable the policy "Specify intranet Microsoft update
 service location", which will force those clients to use "Automatic Updates"
 for the duration of their absence. In that scenario, they will obtain and
 install ALL critical and security updates. You will have no ability to choose
 which updates are installed."

Mike
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
Suggested Courses

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question