locked
All or nothing with WSUS / WU Client and FCS RRS feed

  • Question

  • We're testing FCS on a few machines. WSUS 3.0 does a great job feeding updates for FCS to our test machines. We wondered if there was a way to have our WSUS, for FCS, just push FCS only and let the WU clients stay on Automatic Upates but look to the Microsoft sites for everything else?

     

    We want to push, without user interaction, FCS updates / definitions, but nothing else. We want Automatic Updates to still look to the Microsoft site for other updates. We can't see a way to this kind of granularity. Is this possible?

    Friday, November 30, 2007 9:14 PM

Answers

  • Yes, it seems to, we have some clients on this network who are going to be off the domain, but need fcs installed, so they are going to use Windows Update for ALL their client updates.

     

    Sorry I could not be of more help!

     

     

    Monday, December 3, 2007 6:20 PM

All replies

  • Absolutely, this is the way I have configured this at a customer of ours which required exactly this!

     

    The best thing to do is catalogue the entire WSUS category, ie select all products and classifications to be downloaded, then, under automatic approval, change the default settings to automatically approve the "Definition Updates"

     

    This way, at my customer, they can see how many updates each machine on the network is missing and FCS definition files are approved automatically.


    Remember, if you do not approve an update, it is not downloaded, here is what I would do:

     

    In your WSUS console under Options, under products and classifications, select everything.

     

    Then, under automatic approval, delete the default rule and create your own one which says, if an update is in Definition Updates, Approve for all computers.

     

    This is the setup I have, my client did not want to distribute everything at once as they had another update product doing the updates, WSUS is there to see if its doing its job.

     

    I hope this helps, works perfectly for me!

     

    Re,


    Dave.

     

    Saturday, December 1, 2007 4:10 PM
  • Dave,

     

    Thanks again for the help! This would be the best for our current environment also. We use SMS 2003 extensively to roll out updates and want to just limit the WSUS part of FCS to just definition updates.

     

    We've also got some management folks who like to keep their Microsoft Update set to 'automatic' and want their systems to bypass the FCS WSUS and get all their updates (except FCS definition updates) from the web.

     

    So if we were to configure our FCS WSUS environment as you mentioned, when a client runs an Automatic Update, it will

    1. Look at the FCS WSUS server to see if there are any FCS definition updates
    2. Jump to http://update.microsoft.com for any other updates

    This would be just what we're looking for too.

     

    Monday, December 3, 2007 3:34 PM
  • Hi,

     

    Well, yes, I think you aren't going to have much luck with that, I think you are going to keep those machines on automatic updates from MS and not use WSUS at all.

     

    We have limited one of our particular clients to WSUS only for FCS, but they have a 3rd party app to deploy all other updates(which they are going to move to WSUS eventually). So they are in a different scenario.

     

    I think the only option is for them to do all their updates direct from MS and leave the WSUS out. There is the option to get updates from WSUS or from the web, but this setting is only to restrict the clients to only recieve updates approved by administrators.

     

    Am I making sense?

     

    Re,
    Dave.

    Monday, December 3, 2007 6:09 PM
  • Dave,

     

    Yes, in a word, you are making sense. Thanks for the help on my issue. I guess it is "all or nothing" in our case.

     

    Monday, December 3, 2007 6:15 PM
  • Yes, it seems to, we have some clients on this network who are going to be off the domain, but need fcs installed, so they are going to use Windows Update for ALL their client updates.

     

    Sorry I could not be of more help!

     

     

    Monday, December 3, 2007 6:20 PM