none
Assign a secondary WSUS server to all clients? RRS feed

  • Question

  • We have a need for our VPN users to be able to check-in to one OR the other WSUS server.

    Running Win2003 servers (2000/2003 AD level) latest WSUS 3.0SP and patches.

    We have 2 sites (US and EMEA), that user VPN to for access. EMEA workstations are assigned via GPO to talk to the downstream server in EMEA, and US users point to the US WSUS. We have a VPN NAC Agent that forces the check of WSUS updates upon connection.

    The problem we have run into is, that if the EMEA site is completely down (no WSUS server, no VPN) and the EMEA users connect via the US VPN, they are denied access by the NAC agent because it can't talk to the WSUS server that is assigned in the registry via GPO.

    So my question is, how can I get the WSUS assignment to have a secondary option? Or is there some way 'on the fly' to tell the client to check another location?

    Surely we can't be the only company with this issue?

    Thanks,

    Dirk

    Monday, July 29, 2013 7:19 PM

Answers

  • Hi,

    WSUS is a limited product. I suggest you to subscribe to windows Intunes or Systems Center. For better High availability and many more other deployment methods and proper management.


    Guowen Su
    Cisco Certified Network Associate
    Cisco Certified Internetwork professional - MPLS
    Certified Information Systems Security Professional
    Microsoft Partner Network 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator:Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Certified Ethical Hacker
    Computer Hacking Forensics Investigator
    Certified Sonicwall Security Administrator
    Microsoft Geeks

    • Marked as answer by Soh.M Tuesday, October 8, 2013 2:19 PM
    Tuesday, July 30, 2013 6:34 AM