locked
Use SCCM WSUS server as upstream server for domain in different forest? RRS feed

  • Question

  • Hi there,

    We used to use WSUS to deploy updates to clients in our domain, 1 domain in a different forrest and 1 downstream (secondary) server also serving in a domain in a different forrest.

    We are now using SCCM to deploy updates in our domain. The downstream server we have is going to be deleted. However, we still have a domain in a different forrest (with a 2-way trust) we want to update. We do not want to install SCCM in the other domain.

    Is it possible to use our new WSUS server that is integrated with SCCM as an upstream server for a downstream wsus server in the domain in a different forrest? I know how to install an upstream/downstream wsus combo, but am unsure this will mess up the new wsus server as this is also used by sccm...

    The situation I want:

    WSUS/SCCM in domain one ==> downstream wsus in domain two ==> machines in domain two.

    I hope this is possible.

    Thanks in advance for your help!

    Wednesday, December 15, 2010 3:07 PM

Answers

  • It's not recommended/supported to have a "mixed" WSUS server. It should either be dedicated to WSUS or as a SUP.
    Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
    • Proposed as answer by TorstenMMVP Thursday, December 16, 2010 8:31 AM
    • Marked as answer by Eric Zhang CHN Friday, December 24, 2010 7:55 AM
    Wednesday, December 15, 2010 3:52 PM

All replies

  • I don't think so. The WSUS server that SCCM uses is not getting updates approved and such as a normal WSUS server would. Are you not managing those clients with SCCM in that other domain?

     

     

     


    John Marcum | http://myitforum.com/cs2/blogs/jmarcum/|
    Wednesday, December 15, 2010 3:32 PM
  • It's not recommended/supported to have a "mixed" WSUS server. It should either be dedicated to WSUS or as a SUP.
    Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
    • Proposed as answer by TorstenMMVP Thursday, December 16, 2010 8:31 AM
    • Marked as answer by Eric Zhang CHN Friday, December 24, 2010 7:55 AM
    Wednesday, December 15, 2010 3:52 PM
  • I concur with John and Kent; I can only think of bad things that could/would happen.
    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    • Proposed as answer by TorstenMMVP Thursday, December 16, 2010 8:31 AM
    Wednesday, December 15, 2010 5:04 PM
  • Thank you for your replies.

    I will not be trying this then. Don't want to mess things up with sccm, I'll never get it working again if I do.

     

    @ John: nope, no sccm in the other site (that would have saved me a lot of trouble ;) )

    Thursday, December 16, 2010 7:43 AM