How to group computers for WSUS downloads

I would like to configure my servers to automatically install WSUS updates.
I am unsure how to configure folders on the WSUS server.

If I create groups in Active Directory and then assign servers in to groups
will WSUS pick up those changes? If not, how do I assign servers in to
certain 'computer groups' within WSUS.

Thank you,

JT

"JT" <> wrote in message
news:ACDB4787-31DB-4D10-8844-...
>I would like to configure my servers to automatically install WSUS updates.
> I am unsure how to configure folders on the WSUS server.

There is no need to configure any folders on the WSUS server.


> If I create groups in Active Directory

Groups? or Organizational Units?

> and then assign servers in to groups

Security Groups?

> will WSUS pick up those changes?

Not likely, based on a literal interpretation of the vocabulary you've used
in the above sentence.


> If not, how do I assign servers in to certain 'computer groups' within
> WSUS.

I believe you may find some help from starting with these online documents:

WSUS Overview:
[http://technet.microsoft.com/en-us/l...9(WS.10).aspx]

Step By Step Guide:
[http://technet.microsoft.com/en-us/l...2(WS.10).aspx]

Update and Configure the Automatic Updates Client (in the WSUS Deployment
Guide):
[http://technet.microsoft.com/en-us/l...0(WS.10).aspx]




--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

On Thu, 22 Oct 2009 17:47:01 -0700, JT <> wrote:

>I would like to configure my servers to automatically install WSUS updates.
>I am unsure how to configure folders on the WSUS server.
>
>If I create groups in Active Directory and then assign servers in to groups
>will WSUS pick up those changes? If not, how do I assign servers in to
>certain 'computer groups' within WSUS.
>
>Thank you,
>

All this is documented in the WSUS Operation and deployment guides.

Essentially WSUS does not know or care about AD groups or OU's. The clients do
not even need to be in a domain.

That said you have 2 choices: In the WSUS console under options/computers set
WSUS for WSUS Console or Group Policy

In both cases you must then create the WSUS Groups in the WSUS Console.

If you decided to use the WSUS Console you move computer that show up in the
WSUS console to the group you wish them to be in.

If you decide to set WSUS to use Group Policy/Registry then you define the WSUS
Group in the GPO/Registry that is applied to each client. The WSUS group name
set in the GPO must be exactly the same name as the name set when creating the
WSUS Group in the console.

Now AD come into use only in targeting which GPO is applied to which computers.
Typically you will have at least 3 WSUS groups, Workstation, Servers, TestPCs
and thus 3 GPOs that set the WSUS settings. When a PC is added to AD and placed
in the correct OU the relevant GPO is applied and it gets all the settings and
pops up in the right place in WSUS.

IMHO if you have AD deployed then using GPOs to manage the WSUS groups is
clearly the easiest way but it is a bit more complicated to set up. If you find
using GPOs easy then doing so for the WSUS settings takes just a few minutes.




>JT
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.