Windows 2008 Updates usin Group Policy

I have nearly 300 servers I need to update.  Some of the servers are 2003 machines and some are 2008. These servers have not been updated in the last two years.  I am considering using Group Policy to perform the updates. I do not have a WSUS server to pull the updates from.  My question is: How can I download the latest service packs and security patches using group policy.  Or, is this a two step process. I am required to manually download the SPs and security patches and then configure group policy to pull form a central source?

I don't have time to configure a WSUS servers at this point.

Thank you.

Lipotech
lipotechSys EngAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lipotechSys EngAuthor Commented:
Can I simply configure Group Policy to use Windows Updates to download the latest patches?

Lipotech
kevinhsiehCommented:
Yes, just set group policy to automatically download and install updates. You can set the time and day of the updates. They will need to go through several rounds of updates.

I am quite concerned that there are 300 servers with no WSUS.

You should still setup WSUS to get reporting on what is updating and which machines are missing updates. It doesn't take that long.
arnoldCommented:
It would be a two step process, and you would benefit greatly by installing/configuring WSUS first (it is a role on a windows 2008 server) As it will provide you with an opportunity to test to make sure that an update from MS does not break one of your application.
Additionally, since windows 2003 is getting off support in a few months, the updates will be on your WSUS....

This also may help in curbing the consumption of your Bandwidth. i.e. 300 systems will go out and try to download all the updates .....when the GPOs apply

The GPO/s configured you will have to set the WSUS policy as others pointed out.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.