locked
migrating one-server topo to two-server RRS feed

  • Question

  • so we deployed Forefront in a one server topology not knowing that you cannot run that while you already have an instance of WSUS running in the domain (it appears to work on the surface). So I'm trying to take the steps to change our 2008 R2 WSUS server to be the distribution server and keep the rest of the roles on the forefront server which is 2003. I followed this guide so far:

    http://technet.microsoft.com/en-us/library/bb841431.aspx

    and have not seen any machines populate into the forefront groups on our WSUS server. I haven't found anything on changing a setting in forefront client manager to change the path of the distribution server which seems to me like there would have to be so th at when you push policy it fills that part in correctly.

    So what are the proper steps to take to do this? Is it just easier to re-install Forefront Manager and pick two-server topology in the wizard?

    Friday, November 12, 2010 7:52 PM

Answers

All replies

  • Hi,

    First, you don't need to install distribution server role if you have WSUS 3.0 because it for WSUS 2.0. Please note that the FCS distrubution role is only properly configured WSUS 2.0 which gives it the ability to sync once an hour and not once a day as it is before this update http://blogs.technet.com/b/fcsnerds/archive/2009/07/27/distribution-component.aspx

    Second, after migrating WSUS to the new server, so to redirect your machines to new one, you should do that via a domain GPO. Have a look here to more details about WSUS GPO http://technet.microsoft.com/en-us/library/cc708574(WS.10).aspx


    Bechir Gharbi | http://myitforum.com/cs2/blogs/bgharbi/default.aspx
    • Marked as answer by blueswitch88 Monday, November 15, 2010 6:00 PM
    Sunday, November 14, 2010 10:39 PM
  • Yup I read that about WSUS 3.0 and not needing the dist. role. The WSUS server was one that was already in production...so if I add forefront in the product definitions in WSUS..and make the change for auto acceptence...then I just need to change the GPO's that Forefront deployed to point to the WSUS server instead of WSUS running on the Forefront machine? There are no WSUS settings to change within the Forefront Management console?
    Monday, November 15, 2010 4:16 PM
  • so if I add forefront in the product definitions in WSUS..and make the change for auto acceptence...then I just need to change the GPO's that Forefront deployed to point to the WSUS server instead of WSUS running on the Forefront machine? There are no WSUS settings to change within the Forefront Management console?
    Yes you want to make sure that machines point to your new WSUS and it must be done through GPO. And yes there are no settings to do on the FCS management console.

    Bechir Gharbi | http://myitforum.com/cs2/blogs/bgharbi/default.aspx
    Monday, November 15, 2010 4:29 PM