Link to home
Start Free TrialLog in
Avatar of Asif Naeem
Asif NaeemFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Wsus updates and custom view

Hi,

I have recently configured the Wsus server 2012 and applied the GPO to get all updates on servers on  our MS estate which consist over 200 Servers mostly Server 2012 but  few still on Server 2003 which I need to exclude  from this.  
I have created the custom update view for server 2012 and choose  only for  critical, security, and roll-up updates. But unfortunately non of the server is appearing in costume view. all server 2012 and 2003 are apearing under All computer--->Servers.
 Please  how I can  force only mention updates only on Server 2012 and exclude the Server 2003 to disappear from Servers under the All computers.
secondly how I can force to get Custom view updated and can apply in more refine way to push the updates.  

Please help.

Regards
Avatar of Hypercat (Deb)
Hypercat (Deb)
Flag of United States of America image

There are two ways to manage which machines get updates from WSUS, and this must be done through group policy and AD attributes.  You can do one of the following:

1.  Put the servers you want in WSUS in a separate Organizational Unit in Active Directory and then apply your WSUS group policy only to that OU.
2.  Create a separate security group for the servers you want in WSUS and then set the permissions for the group policy so that only that group can access and process the policy.

As for your question about views, there aren't any details so I'm not sure what exactly you're trying to do.  There are two main groups of settings in WSUS, Updates and Computers, and there are several subgroups that appear automatically under those main groups.  Then, you can create other subgroups under the main ones if you choose to do that. There are a couple of ways that you can control what appears in those subgroups. You can also customize the columns that appear when you click on each subgroup.  It all depends on where you created your custom view and what items you want to see in the custom view. If you could post more detail about exactly what view you're trying to create, I can help more.
Avatar of Asif Naeem

ASKER

I am going to check this in detail and will update the case

Thanks
Hi,

Sorry for late reply I was busy few weeks with other jobs.  In Wsus Admin console we have two option
1- Updates which contains  subgroups  like All updates  Critical updates etc.
2- Computer-- where all computer and server sits and can be added new group like Servers.

But if we right  click Updates  it gives option the create new update view and then we can use classification to define what exactly update we need.
this populate Server in that group where you can approve updates to install on server listed with custom view.

This where I am stuck and I have created the custom view but non of the server or updates are showing in it.  Please can I have assistance on this.

Regards
It all depends, of course, on what your choices were when you created the custom view.  For servers, my suggestion woudl be to choose "Updates are for a specific product" in Step 1and then in the Step 2 box, click the "any product" choice and groom the list so that it only will show updates for the server operating systems that you have at your site. If this isn't what you did, then please try that and see if it works for you.  Of course, the list won't show anything unless there are servers connected to the WSUS server that need updates for those specific operating systems.
Hi,

Thanks for the response, All the servers are connected with WSUS and I am already applying the patches . I have worked in previous role where we had Server 2008 WSUS server and every time if we need to patch we just simply Create the Costume view  and chose what we want to approve.  But the environment was build before I started there.
Now in new job role I am using WSUS server 2012  where I wants to apply the similar rule So I can have full control what is need or not .

Regards
Asif
ASKER CERTIFIED SOLUTION
Avatar of Hypercat (Deb)
Hypercat (Deb)
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi,

I am aware of this and already created the Custom view, as it is basic steps . But my Question was I had problem where Server are appearing within Created Custom  view and I cannot find any reason why ?

Hope this will help to direct me right side.

Regards
I think you're confused between custom views for Updates and custom groups for Computers.  Creating a custom view under the Updates section only applies to the list of updates waiting to be approved.  It doesn't change the group in which the computers appear under the Computers section.  To separate out the list of computers in the Computers section, you need to create a new group there and then move the computers manually from the All Computers list to the custom group that you created.

Once you create a custom group for the computers, you can then approve the updates for that group from the custom view you created under Updates.

If this still isn't clear, perhaps you could post a screen shot of your custom view that you created.
thanks