Ask a questionAsk a question
 

AnswerWSUS Alternate address configuration

  • Monday, November 02, 2009 4:17 PMLPChu Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I'm configuring a bunch of client computers for WSUS, and have set up appropriate Group Policy entries to point to our WSUS server.  The questions I'm about to ask stem from the fact that some of these computers are laptops:

    1. If for whatever reason the WSUS server is unreachable, will the Windows Update client automatically search Microsoft's servers for updates, or will it simply sit in the corner until the WSUS server is available again?
    2. If the answer to number 1 is the former, will it still follow the policies as set in GP regarding installation (e.g. "Download and notify about installation," "Download and install automatically," "It's up to the admin," etc.), or does it have another default setting?

    Basically, we want full approval over any update that passes through WSUS, obviously, but we're afraid that if some of the users take their laptops with them, they'll either install and run unapproved updates during the scheduled update time, or even just install updates without our approval in general.  If the answer to question 1 is the latter option, we can rest easy.  However, if the answer to both questions are their former options, we'll probably specifically request that the admin authorizes the installation before it happens.

Answers

All Replies