We help IT Professionals succeed at work.

Clients Computer from AD to Populate into WSUS using Script.

Hi Expert,

I have question regarding the WSUS server.  I am looking to use wsus server for updates nearly 4k clients mixed windows 7 and windows 10 to download and install updates in  complex AD structure and nested computer OU like , Computer ------Site 1  ---Apple ---Orange  etc.
Is there any way or power shell script or any vb script which can populate Computer and nested OU with WSUS under Computer tab? I am sure someone may have done same specially working in large organization.
Please assist any script that can bring AD Computer OU hierarchy into WSUS and Then I can create my GPO to deploy or force clients to get all the updates using wsus.

Please advise.

Regard
Asif
Comment
Watch Question

System Administrator / Postmaster
CERTIFIED EXPERT
Commented:
ASif,
you don't need to recreate OU structure. WSUS groups are independent from AD.
You can use client side targeting in the GPO to direct computers to the correct WSUS group.

In a nutshell:
- try to reduce the need for WSUS groups: they should be used to apply different update approval settings
- populate these groups client side via the GPO.
DonNetwork Administrator
CERTIFIED EXPERT
Commented:
Other than Servers and Workstations, the only other group I personally see necessary would be "Testing". Any more groups than that is way too much unnecessary work IMO. In my environment I don't even bother testing updates, it's much easier to deal with the very rare issues than to waste my time testing updates. That time can be spent on more pressing issues.
Asif NaeemSr. System Administrator ( Wintel & UNIX (AIX)

Author

Commented:
Hi,

I knows its pain in back But uniformity I need to go this as part of Cyber security essential, it s boring  time taking  job to created 120  Computer groups as per sites and distribution and then apply GPO on this to force clients win 10 and win 7 for updates.
 
Regards
A
MichelangeloSystem Administrator / Postmaster
CERTIFIED EXPERT
Commented:
MichelangeloSystem Administrator / Postmaster
CERTIFIED EXPERT

Commented:
The link I posted along with a basic knowledge of powershell for AD can be used to achieve what you want. If you need someone to actually compose and test the script for you, and no one finds the time to do that, you should open a Gig and/or ask for paid help. Other than that,this thread has the nevessary info on how to answer your question and build a script which can modify WSUS group structure based on a data source.