locked
Do i need to run a seperate WSUS server? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Once i have sce 2010 installed, can I point my GP's to that server for windows updates and then unninstall my WSUS server?

    Is there a reason to keep my WSUS server around to run in tandem with SCE 2010?

     

    thanks

    Wednesday, June 23, 2010 3:32 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    WSUS is how SCE deploys it's updates, you should be able to see the wsus console on your SCE server.  Additionally, you will run into problems if you have a conflicting GPO that tells your SCE to look at the old wsus server for updates (downstream configuration).

    So to answer your question, yes, configure the gpo's to use your SCE server for updates, then remove your existing wsus server. 

    WORD OF CAUTION:  SCE will not import any update databases from your existing wsus server, client groups included, without doing replication and restoring databases and other types of magic, even then, it's no guarantee.

     

    Tim

    Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
    • Proposed as answer by Tim Magnuson Wednesday, June 23, 2010 4:17 PM
    • Marked as answer by mojogar Wednesday, June 23, 2010 4:37 PM
    Wednesday, June 23, 2010 4:17 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    The following article on SCE TEAM BLOG is just for your scenario:

    You want different update deployment settings for servers and clients?
    http://blogs.technet.com/b/systemcenteressentials/archive/2010/02/17/you-want-different-update-deployment-settings-for-servers-and-clients.aspx

    Hope it helps,

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by mojogar Thursday, June 24, 2010 2:54 PM
    Thursday, June 24, 2010 9:15 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    WSUS is how SCE deploys it's updates, you should be able to see the wsus console on your SCE server.  Additionally, you will run into problems if you have a conflicting GPO that tells your SCE to look at the old wsus server for updates (downstream configuration).

    So to answer your question, yes, configure the gpo's to use your SCE server for updates, then remove your existing wsus server. 

    WORD OF CAUTION:  SCE will not import any update databases from your existing wsus server, client groups included, without doing replication and restoring databases and other types of magic, even then, it's no guarantee.

     

    Tim

    Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
    • Proposed as answer by Tim Magnuson Wednesday, June 23, 2010 4:17 PM
    • Marked as answer by mojogar Wednesday, June 23, 2010 4:37 PM
    Wednesday, June 23, 2010 4:17 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I also nociced on install of sce that it deletes the server setting in GP to the old WSUS server.  Am i remembering that right?  On opening the GPs for updates, I notice that its blank now.
    Wednesday, June 23, 2010 4:22 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    deletes the wsus server setting on your SCE box?  that i can't answer, it'd make sense if it did, that would prevent it from running in an unsupported mode. 

    the gpo's that are blank, you're referring to the new ones? old ones? or something locally on the server?

    Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
    Wednesday, June 23, 2010 5:46 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    im, sorry, i should have explained that better.

     

    I had created an old global GPO that pointed to my WSUS server for updates to run at a certain time on all PC's, so they would get updates from the WSUS server.  When I installed SCE 2010, during the installation process (if im remembering correctly), it found the GPO, and disabled it (or just took the WSUS server name out of the setting).  So now when I run GP manager, and open that old GP that I had created, the setting that used to tell it what the "intranet Microsoft update service location" was (the WSUS server), is now not configured. 

     

    I would also assume that now I need to list the SCE server name in that spot now?

     

    The GP is under Computer Config/policies/admin templates/windows components/windows update/specify intranet microsoft update service location

    Wednesday, June 23, 2010 6:31 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Ok now I kind of remember.  The SCE setup will look at your GPO's and notify you if any GPO's have settings for Windows Update in them, I think it asks you if you want to delete them or if you want SCE to remove the conflicting entry...can't remember 100%.  The old policy probably has inaccurate data, along with invalid keys and what not, SCE should have created 2 domain level policies, those are configured during the setup and are the ones that should be used.  If you don't feel comfortable deleting your old policies, you can always disable them and re-enable if need be.

     

    Tim

    Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
    Wednesday, June 23, 2010 6:55 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    i only see one.  SCE Managed Computers Group Policy, and its automatically applied right under the domain. 

     

    So what if i want different update settings for differnet machines(for computers and servers for instance)?  I dont want my servers auto rebooting. 

    Wednesday, June 23, 2010 8:32 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    The following article on SCE TEAM BLOG is just for your scenario:

    You want different update deployment settings for servers and clients?
    http://blogs.technet.com/b/systemcenteressentials/archive/2010/02/17/you-want-different-update-deployment-settings-for-servers-and-clients.aspx

    Hope it helps,

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by mojogar Thursday, June 24, 2010 2:54 PM
    Thursday, June 24, 2010 9:15 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    that was a great blog post.  Thanks.

    Thursday, June 24, 2010 2:54 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    he beat me to it, I actually have different policies setup in my environment for my servers, they're in separate OU's and have an SCE server version GPO applied to them, i followed that blog when I set mine up.  Good luck!

     

    Ok, so I changed my name...you can still call me Tom if you like. It's a...jump...to conclusions...mat.
    Thursday, June 24, 2010 3:48 PM