Hello. I have an issue with activate and update Windows servers from local environment. The HQ has blocked an Internet access from our local environment. And I have to send to HQ an IP list for open at their firewall. There is no other way I can activate
and update Windows servers in our local environment. There is many of servers, most are VMs.
I don't have a Software Assurance, so, does a Technet is the best way to get IP adresses for your Windows Update sites?
Can you give it to me?
Or there is some other way to activate and update Windows servers behind HQ firewall?
The trouble you'll have is the IP addresses could change in the future (without warning) and that there are a lot. The wildcard DNS names suggest to me that there are possibly many DNS names that could be used with any number of IP addresses.
Another approach would be to set up a local WSUS server and grant it access through the firewall using a method were you do not need to identify specific IP addresses. With Group Policy you would instruct your Windows machines to update using your WSUS server
which also allows you to approve and release updates.
Using a WSUS server also allows for the second scenario I asked about above -- instead of knowing which internal servers need to access Windows Update, setup WSUS and have all hosts use this. Again, in the firewall you would have the one exception for this
server and you can add or remove servers internally with no additional firewall administration.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.