Wsus updating

Hi I want to do an automated patching process and was going to use WSUS unless there is something better? I want to know if I go through with WSUS can i choose which means get patched first or is it an automatic it just goes out and patches anything on the network ?
wayne3597Asked:
Who is Participating?
 
arnoldConnect With a Mentor Commented:
GPO based management of windows update settings provides you with a broad scope of options.
A comment with links was posted.
In AD you would create an OU or OUs where using a GPO and client target setting within the windows update section to a test group within the wsus interface.
Note that you would be required to manage the approval process in this type of setup.
I.e. you can configure auto approve rules for the test groups, but then you would have to manually approve the same updates for the rest of the systems.
0
 
Donald StewartConnect With a Mentor Network AdministratorCommented:
Definitely go with WSUS (ITS FREE).

Look over


Best Practices with Windows Server Update Services 3.0
http://technet.microsoft.com/en-us/library/cc720525%28v=ws.10%29.aspx

and

How to Configure Client Side Targeting in WSUS
http://prajwaldesai.com/how-to-configure-client-side-targeting-in-wsus/
0
 
wayne3597Author Commented:
can you pick individual machines to be updated and not the whole network of devices?
0
 
Donald StewartNetwork AdministratorCommented:
First, are you concerned with bandwidth ??

Yes, you would just create separate GPO's ---like "Servers" + "Workstations"

and then use client side targeting
0
 
wayne3597Author Commented:
no we are not concerned with Bandwidth we just would like to automate process and release updates to test severs then  a few days later to production then a few days later to workstations
0
All Courses

From novice to tech pro — start learning today.