locked
Newbie questions RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Our WSUS tech took another job and now WSUS was tossed in my lap.  I've never used it and had a question or two on it.   I have read some TechNet docs on it and I am familiar with what it does etc...etc....

    I know you need to create a GPO Object that applies MS Update settings. Then apply/link this GPO Object to the OU's you want to target.    But where in the WSUS tool on the server do you make this connection?    Meaning, how does the WSUS server know which GPO or OU to link up with?

    In WSUS we have tons of UPDATES.  And we have all of our COMPUTERS defined.  How do you tell WSUS to "apply these updates to those machines?" 

     

     

     

    mqh7
    Tuesday, June 15, 2010 3:46 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote
    How do you add computers to the WSUS computers window?

    The answers to this question, and other related computer/group/memberships questions can be found in two places:

    Step 6: Configure Computer Groups in the Step-By-Step (Installation) Guide

    and

    Create the Computer Groups in the WSUS Deployment Guide

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Wednesday, June 16, 2010 10:25 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    I know you need to create a GPO Object that applies MS Update settings. Then apply/link this GPO Object to the OU's you want to target. But where in the WSUS tool on the server do you make this connection?
    You don't.
    Meaning, how does the WSUS server know which GPO or OU to link up with?
    It doesn't. If you're assigning group memberships via policy, then the client computer tells the WSUS Server what group(s) it belongs to. If you're assigning group memberships via the server, then the WSUS server tells the client what group(s) it belongs to. The WSUS server knows nothing about Group Policy, and the sole purpose of the GPO is to configure the Windows Update Agent on each client computer system.
    In WSUS we have tons of UPDATES. And we have all of our COMPUTERS defined. How do you tell WSUS to "apply these updates to those machines?"
    You approve the updates for the groups that the computers are a member of. This alllows each client system via the Windows Update Agent to be aware of the availability of the update, download the update, and install the update -- according to the policy settings you have configured in the GPO that is applied to the client computer system.

    Despite having found some "Technet docs" on WSUS, I'm not sure you've found the correct ones, because all of these questions are answered in the first few pages of these documents. I hope they help.

    Please review:
    WSUS Step By Step Guide
    WSUS Deployment Guide
    WSUS Operations Guide
    All of your questions, and dozens more, are addressed in those three documents.
    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Tuesday, June 15, 2010 6:22 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks, that is good to know.   and I have 1 more newbie question if you don't mind:

    Inside of the WSUS console there is the Computers container.  Under Computers there is a sub-container called "unassingned computers".   What causes a machine to show up here?   I have 3 test machines that are on the network yet when I do a search on Computers within WSUS it can't find them.  How do you add computers to the WSUS computers window?

     

    mqh7
    Tuesday, June 15, 2010 8:54 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    you might have filtered the view..and they are there but you cant see them... check that you are viewing by "Status:Any" etc

    or...

    In a test environment, try this:

    Make a Group Policy Object and configure:

    Computer Configuration, Administrative Templates, Windows Components, Windows Update

    In there, enable "Specify Intranet update service location" with the name of your WSUS server

    Make sure that the policy is applied to your test client by whatever means

    On your client, run gpupdate /force then, run wuauclt /resetauthorizations /detectnow then wuauclt /reportnow

    Wait a little while... you should then see your test box in "Unassigned Computers"?

    If so, then you are closer. start playing with the other settings in your GPO and see what they do...

    Good luck!

    Wednesday, June 16, 2010 6:51 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Under Computers there is a sub-container called "unassingned computers".   What causes a machine to show up here?
    Computers are added to "Unassigned Computers" when they first register with the WSUS Server as a client =AND= both Server and Client are configured to use Server-Side Targeting.
    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Wednesday, June 16, 2010 10:23 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    How do you add computers to the WSUS computers window?

    The answers to this question, and other related computer/group/memberships questions can be found in two places:

    Step 6: Configure Computer Groups in the Step-By-Step (Installation) Guide

    and

    Create the Computer Groups in the WSUS Deployment Guide

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2010)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    My Blog: http://onsitechsolutions.spaces.live.com
    Wednesday, June 16, 2010 10:25 PM