locked
Approve wsus update on group RRS feed

  • Question

  • I've got an environment where users are moving to new wsus

    currently they have 2 wsus gpo (old wsus and new wsus) tie to 1 OU.

    The workstation are still getting updates from the old wsus.

    The policy in the new gpo is only set-intranet enabled (no automatic install policy yet), this is to try to have the workstation report back to the new wsus so then later arrange the workstation to a specific grouping.

    If approving the update from new wsus to the group will the workstation get updates from the old wsus or the new wsus?

    Or do have to remove the old gpo link from the OU first then create the automatic install policy on the new gpo then approve update from new wsus?


    • Edited by sabrina_ksy Thursday, February 14, 2019 8:31 AM
    Thursday, February 14, 2019 8:27 AM

All replies

  • Hello,
     
    Well, if the client is pointing to the old WSUS, then approving from the new WSUS would not do anything. 
     
    And which server the client is pointing to depends on which GPO won the conflict. You could run "rsop.msc" or "gpresult /h c:\GP.htm" to check which GPO won.
     


    The result is really unpredictable. To avoid the GPO conflict, you have to remove the old GPO, or at least remove the policy "Set the intranet statistics server" from the old GPO for now.
     
    Hope my answer could help you and look forward to your feedback.
     
    Best Regards,
    Ray

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, February 14, 2019 11:16 AM
  • Why not think differently. Make it easier on yourself and use client-side targeting along with a GPO inheritance setup. It makes everything SO EASY to manage. Part 4 of my 8 part blog series on How to Setup, Manage, and Maintain WSUS will give you the step by step guide to do this. Feel free to read the rest of the blog series.

    https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

    On the note of migrating to a new version of WSUS, the following guides may help you.

    https://www.ajtek.ca/wsus/how-to-migrate-or-upgrade-wsus/

    https://www.ajtek.ca/wsus/wsus-system-requirements-what-should-i-plan-for/


    Adam Marshall, MCSE: Security
    https://www.ajtek.ca
    Microsoft MVP - Windows and Devices for IT

    Saturday, February 16, 2019 9:42 PM
  • Hello,
     
    I noticed that you have not updated for several days. Has your issue been solved? Or is there any update?
     
    Feel free to feedback.
     
    Best Regards,
    Ray

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, February 19, 2019 12:56 PM