locked
Configuration issues RRS feed

  • Question

  • Hello,

    We have been tasked to configure WSUS to patch several hospital sites using WSUS. All the hospital sites are within their own domain, we just manage all their VMs. Is it possible to configure WSUS to manage all the sites with WSUS even if they are not part of the same domain? I wanted to make just one WSUS as the central location where I managed all the sites.


    • Edited by BARRIOSWJ Tuesday, February 23, 2016 9:21 PM
    Tuesday, February 23, 2016 9:21 PM

Answers

  • Hi BARRIOSWJ,

    >Is it possible to configure WSUS to manage all the sites with WSUS even if they are not part of the same domain? I wanted to make just one WSUS as the central location where I managed all the sites.

    WSUS is not domain based, so it is possible to configure WSUS to manage different domain clients. We need to ensure domain clients apply the GPO correctly, and the GPO points to the correct WSUS server. The clients could resolve the WSUS server's name correctly and network connection is well.

    Here are some information about how to configure GPO for WSUS clients:

    https://technet.microsoft.com/en-us/library/cc720539%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    Beside, if you want to reduce the central WSUS server's work load, you may set up different downstream WSUS servers in different sites.

    WSUS server hierarchies:

    https://technet.microsoft.com/en-us/library/cc720448(v=ws.10).aspx

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Wednesday, February 24, 2016 6:07 AM

All replies

  • Good Day

    Just configure a WSUS GPO in that domain to take the updates from your WSUS Server and that should be all

    Regards


    • Edited by Alvaro Saenz Tuesday, February 23, 2016 10:36 PM
    Tuesday, February 23, 2016 10:30 PM
  • Hi BARRIOSWJ,

    >Is it possible to configure WSUS to manage all the sites with WSUS even if they are not part of the same domain? I wanted to make just one WSUS as the central location where I managed all the sites.

    WSUS is not domain based, so it is possible to configure WSUS to manage different domain clients. We need to ensure domain clients apply the GPO correctly, and the GPO points to the correct WSUS server. The clients could resolve the WSUS server's name correctly and network connection is well.

    Here are some information about how to configure GPO for WSUS clients:

    https://technet.microsoft.com/en-us/library/cc720539%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    Beside, if you want to reduce the central WSUS server's work load, you may set up different downstream WSUS servers in different sites.

    WSUS server hierarchies:

    https://technet.microsoft.com/en-us/library/cc720448(v=ws.10).aspx

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Wednesday, February 24, 2016 6:07 AM