How to use Group Policy to Push Out Windows Updates
I want to use Group Policy to push out windows updates. I need to push out updates only to specific machines. A lot of the machines that I will targeted exist in OUs with non-targeted machines with a variety of GPOs already applied. Will it be necessary for me to create unique OUs for the machines I am trying to target or is there away to manage this within Group Policy Manager to target only the machines I want to update?.
I am not that familiar with GPOs, so any information to assist me with a better understanding would be appreciated.
Lipotech.
I am not that familiar with GPOs, so any information to assist me with a better understanding would be appreciated.
Lipotech.
ASKER
I am re-reviewing the guide. I am not the guide fully answers my question.
Lipotech
Lipotech
ASKER
The following in the guide is objective I am trying achieve:
"In a simple environment, link the GPO with the WSUS settings to the domain. In more complex environment, you might have multiple GPOs linked to several organizational units (OUs), which enables you to have different WSUS policy settings applied to different types of computers."
But, I have not found anything yet in the guide that illustrate how to configure the GPO to achieve the objective. I am still in the process of re-reviewing the guide. I may have missed something.
Lipotech
"In a simple environment, link the GPO with the WSUS settings to the domain. In more complex environment, you might have multiple GPOs linked to several organizational units (OUs), which enables you to have different WSUS policy settings applied to different types of computers."
But, I have not found anything yet in the guide that illustrate how to configure the GPO to achieve the objective. I am still in the process of re-reviewing the guide. I may have missed something.
Lipotech
ASKER
I think I will need to use WMI filters to target specific machines in three different OUs that I want to target. I have no experience with using WMI filters in the GPO editor, but I think WMI filtering is the solution I am looking for. Please let me know if I am on the right track.
Lipotech
Lipotech
WMI filters are only required if you want to target machines that have different Operating Systems or something that is very specific about the computers. Personally if I would not use WMI filters if you do not have to. I would rather use security filtering instead. WMI filtering also puts more over head on your policy processing as well.
Will.
Will.
ASKER
Thank you. Is security filtering a component of the GPO filter? The list that I am required to filter is long and categorized. I am currently researching security filtering.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
https://technet.microsoft.com/en-us/library/cc720539(v=ws.10).aspx
Will.