How to Configure Group Policy to Apply Windows Updates

Under a single OU I have created multiple Security Groups, based on day of week and time of day, that contain server objects that I have targeted to have Windows Updates applied.  I am having a problem understanding how to create the GPO which will be linked to the OU where the Security Groups are contained.  When I open GPMC, which folder should I expand to link the GPO to the designated OU? I have created a GPO to automatically download the latest Windows Updates. How do I tie the GPO to the GPO created to download the Windows Updates. Is my design flawed?  Is there a more manageable approach?  Let me know if more clarity is needed.

lipotechSys EngAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Toni UranjekConsultant/TrainerCommented:
GPO has to be linked to OU with computer accounts, always.

You can use Security groups for Security filtering when applying GPOs.

For single GPO, you have to remove Authenticated users group from Security filtering section, and add security group which you have created.

it is not important where in AD are your securitay groups located.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lipotechSys EngAuthor Commented:
I have created multiple GPOs. Each representing a day of the week and a specific time of day.  I have linked the GPOs to the parent OU.  When the GPO executes based on its configuration, where are the Windows Updates being downloaded from?  Is there a way to specify where the updates are downloaded from?  Is there a way to configure the GPO to download the Windows Updates from a specific location?

Thank you,

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.