Solved

WSUS and seperating desktops and servers

Posted on 2014-11-13
3
125 Views
Last Modified: 2014-12-10
Hi,

I was thinking of setting up a 2nd WSUS server as I want to be able to have my servers point to one and desktops another.  We struggle a bit with the WSUS view and distinguishing between servers and desktops, which patch for which, with our one WSUS server. This is probably just me! I thought that if I have desktops point at one, and servers the new WSUS server, it would be much easier.  We're not a large site and this might be a bit extravagant but we’re not too worried about “wasting” resource (bandwidth, space, etc) if that’s what the easiest and tidiest solution requires.

Ideally I want to be able to launch WSUS for desktop and only see desktop and relevant patches and launch the server instance and only servers and relevant patches.

Can I just build a separate standalone 2nd WSUS server, have this pull the patches from MS and point servers to this? Or is there a better way to do this?


Thanks
0
Comment
Question by:kswan_expert
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 54

Expert Comment

by:McKnife
ID: 40441567
"Can I just build a separate standalone 2nd WSUS server, have this pull the patches from MS and point servers to this?" - Sure you can.
"Or is there a better way to do this?" - I would not separate those. You can use groups of machines, clients and servers separated. As for updates: why would you want to separate here, do you plan not to install certain updates on servers? Again groups could be used, just set those up in WSUS.
0
 
LVL 35

Accepted Solution

by:
Seth Simmons earned 250 total points
ID: 40441910
instead of manually managing groups in WSUS, easier to configure your GPO to use client-side targeting and match the name with the WSUS name so the system will go into that group automatically.  just remember to configure WSUS to use that instead of the default manually managed groups.

one WSUS instance is sufficient
0
 
LVL 12

Assisted Solution

by:maxloi
maxloi earned 250 total points
ID: 40442173
I agree, you don't need another WSUS Server, simply use groups.
Here some useful sites where you can learn how to do:

http://www.vkernel.ro/blog/configure-wsus-to-deploy-updates-using-group-policy
http://windowsitpro.com/windows-8/group-policy-settings-wsus

Max
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question