Solved

Exempt server from WSUS update

Posted on 2013-12-17
6
380 Views
Last Modified: 2016-02-20
Windows update on a server is currently being managed by WSUS. How to make sure that Windows update on the server is no longer managed by WSUS?
0
Comment
Question by:bobox00
6 Comments
 
LVL 16

Expert Comment

by:Emmanuel Adebayo
ID: 39724889
Is this one server or all the servers in your organisation?

How many servers are you looking to exempt?

Regards
0
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 167 total points
ID: 39724898
If you are enforcing WSUS settings by group policy then you need to limit which machines that group policy applies to. The most common setup is to put client machines into one OU and servers into another (and even use sub-level OUs to break them down further if necessary) and then apply the WSUS policies only to the OU(s) you need.

You aren't technically "exempting" a server with this setup. You are instead limiting which machines participate with WSUS in the first place.

But this also gives you a very granular setup. For example, I may want clients to download and install setting automatically. And if I have two servers, I may still want to use WSUS to save bandwidth, but I simply want to approve updates and manually install them. The above setup, with different policies applied to different OUs, allows such a setup with ease.
0
 

Author Comment

by:bobox00
ID: 39724903
Step by step guide, link... any?

Thanks for your posts
0
How does your email signature look on mobiles?

Do your employees use mobile devices to reply to emails? With mobile becoming increasingly important to the business world, it is in your best interest to make sure that your email signature looks great across all types of devices.

 
LVL 16

Assisted Solution

by:Emmanuel Adebayo
Emmanuel Adebayo earned 167 total points
ID: 39724911
0
 
LVL 22

Assisted Solution

by:David Atkin
David Atkin earned 166 total points
ID: 39726045
If its Small Business Sever then you would open the SBS Console, browse to Security Tab >  Updates (Sub Tab)>

On the right hand side click on 'Change the software update settings'

Click on included computer.

Remove the server from the included column to the excluded column.


Note:
This will exclude the Server from being applied the updates but the WSUS GPO will still be pushed to the Server.  If you want to check for updates you will have to do it manually via Windows Update in control panel and select 'check online for updates from Microsoft Update'
0
 

Author Closing Comment

by:bobox00
ID: 39758295
Thanks
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

709 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now