Avatar of MJB2011
MJB2011 asked on

WSUS - Planning and remote users

Hi all,

At the moment we have no control over Windows updates on our networks. They are just set to auto update.

I have 4 sites that I plan to have local WSUS servers setup. My main problem is remote users. I have a number of laptops that connect via VPN daily, and some very rarely. SO my questions are:

1) What woudl be the best way to configure for laptops?

2) I was going to setup group polices for the different site severs filtered by IP scope for each site, is this a good idea?

3) Current WSUS server is 2008 wsus3 sp2 - should I upgrade to 2012 now for Win 8.1 compatibility?
Windows Server 2008Microsoft Server AppsWindows Server 2003WSUS

Avatar of undefined
Last Comment
Sandeep

8/22/2022 - Mon
Chris

You could always setup a web facing WSUS server for the external clients. Not something I've ever seriously looked at but there's no reason it should cause any issues. In this instance I would be inclined to setup WSUS just to manage the updates and not to host them. This way you can manage the updates centrally but they'll still be downloaded from MS, saving you bandwidth.

With regards to the version of windows server, there's no need to upgrade. WSUS is simply a database of updates synced with Microsoft, if they are available on Windows Update they should theoretically be available to the WSUS server whether it's running Server 2012, 2008 or even 2003. Just make sure the WSUS software is up to date.
ASKER
MJB2011

Web server not an option unfortunately.
Sandeep

All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
ASKER
MJB2011

Fall back although useful, isnt  going to help, as when user is on VPN they will still see the WSUS and drag updates across VPN rather than heading to microsoft.
Sandeep

So you want all your users to point to Microsoft only? Even though they connect to VPN?
ASKER
MJB2011

Basically I need some how to change the server they are looking at depending on whether they are in the office or at home. when they are at home they could either connect to a wsus server at our VPN termination site or go to Microsoft.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER CERTIFIED SOLUTION
Sandeep

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question