locked
SUP and WSUS RRS feed

  • Question

  • Hi guys.

    I have 2 questions about SUP:

    1. I Install WSUS in CAS and I Install SUP in CAS. I need exclude the old GPO that points to the old WSUS?

    2. If i have one WSUS in a stand-alone server, i can use that? I need install SUP in CAS and the SUP configuration is same the WSUS?

    THANKS!!!


    Atenciosamente Julio Araujo

    Wednesday, October 15, 2014 5:22 PM

Answers

  • 1. Most likely yes as this will overwrite the local policy being set by the ConfigMgr agent. Alternatively, just change the group policy to point the systems to the new WSUS instance.

    2. The SUP role requires that it be installed on a site system with a WSUS instance. These can be on the site server or can be remote. For a CAS though, it makes no sense to move them remote since there is little to no load on the WSUS instance at the CAS.

    And of course, as I always point out and/or ask, why are you using a CAS in the first place?


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by Daniel JiSun Monday, October 27, 2014 9:32 AM
    Wednesday, October 15, 2014 5:57 PM
  • While yes I understand what you are saying, that's technically unsupported to my knowledge and a terrible practice in general.

    No, clients do not ever use resources in the CAS. The local policy sets the WSUS instance corresponding to the SUP in each primary site. Thus, if you want to use a GPO, you must set the value exactly the same way. You can examine wuahandler.log on any client to see what is being done.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Proposed as answer by Garth JonesMVP Saturday, October 25, 2014 1:43 PM
    • Marked as answer by Daniel JiSun Monday, October 27, 2014 9:32 AM
    Friday, October 17, 2014 1:23 PM

All replies

  • 1. Most likely yes as this will overwrite the local policy being set by the ConfigMgr agent. Alternatively, just change the group policy to point the systems to the new WSUS instance.

    2. The SUP role requires that it be installed on a site system with a WSUS instance. These can be on the site server or can be remote. For a CAS though, it makes no sense to move them remote since there is little to no load on the WSUS instance at the CAS.

    And of course, as I always point out and/or ask, why are you using a CAS in the first place?


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by Daniel JiSun Monday, October 27, 2014 9:32 AM
    Wednesday, October 15, 2014 5:57 PM
  • I need point the GPO to SUP in CAS or in Primary SUP??

    I use cas because i have two forest and the two forest have trust and have Network Conflict because:

    Forest01 has a machine01 with 192.168.1.10

    Forest02 has a machine02 with 192.168.1.10

    The solution:

    Machine 01 assign to site code 01

    machine 02 assign to site code 02

    do you understand?

    THANKS!!!!!


    Atenciosamente Julio Araujo

    Wednesday, October 15, 2014 6:37 PM
  • While yes I understand what you are saying, that's technically unsupported to my knowledge and a terrible practice in general.

    No, clients do not ever use resources in the CAS. The local policy sets the WSUS instance corresponding to the SUP in each primary site. Thus, if you want to use a GPO, you must set the value exactly the same way. You can examine wuahandler.log on any client to see what is being done.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Proposed as answer by Garth JonesMVP Saturday, October 25, 2014 1:43 PM
    • Marked as answer by Daniel JiSun Monday, October 27, 2014 9:32 AM
    Friday, October 17, 2014 1:23 PM