询问者
补丁管理测试,有办法实现吗?

问题
全部回复
-
谢谢斑竹回复。但是你测试一下可能会发现,即使不推GPO,client还是会去找SCCM server拿update的,这个论坛里的某些user也提到了一样的问题。
http://social.technet.microsoft.com/forums/en-US/configmgrsum/thread/2e16fedd-f9e6-4d80-ae33-bcc6fd527de2/
我再测试一遍证实一下,如果update跟GPO没关系
我的推行预测试就很难做了
Peace&Love -
绝对理解。
这是我抄出来一些别人的记录:
What I am observing in my test environment is that a machine without any Windows Update related GPO settings (in fact, without any GPOs applies at all) works flawlessly with software updates
--------------------------------------------------------------------------------
from wally:
Correct, you only need to enable the Software Updates Client Installation IF you want to install the SCCM client through WSUS/SUP. If your client is already installed, no need for it (though you could enable it if you wanted to use WSUS to upgrade the client to the SP1 version when it releases later this spring).You do NOT need to configure Automatic Updates for automatic installation. Not sure where that came from (hopefully not from our docs). All you need to do is to have the AU service enabled, and not disabled.
We do use a policy to set the "intranet Microsoft update location". So you should not have a GPO setting it, or we'll fail to set it and clients may not get scanned or updated via SCCM.
---------------------------------------------------------------------------------
实际情况跟我的一样
Peace&Love -
明白了 :-), sorry,我自己也糊涂了
SUP 来安装 SCCM client,其实就是把SCCM client 作为一个 software update来进行安装 (仔细看通过SUP的安装过程和相关log,它确实是和其它update的安装过程一摸一样,而不是software package的安装过程)。换句话说,凡是使用 SUP 安装SCCM client的机器的 software update 都是通过SUP进行的。
所以要满足lz的要求,就是要在其它机器的OU上设置一个GPO来将update 指向 windows update 站点,而不是内部 SUP。 这个测试组的机器还保留原样即可。反正lz的环境中所有机器都已经安装client了。