Policy for Domain Controllers to run WSUS updates

Is it ok to add a group policy to the existing domain controller ou in order
to have security updates and critical updates run from my wsus? My DC
servers are having issues getting the updates from the internet. What are
the downsides of adding domain controllers to the group policy to update if
any?

[[ Right pew, wrong church. Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP.

On the web:
http://www.microsoft.com/communities...pdate_services

In your newsreader:
news://msnews.microsoft.com/microsof...pdate_services
]]


COB wrote:
> Is it ok to add a group policy to the existing domain controller ou in
> order
> to have security updates and critical updates run from my wsus? My DC
> servers are having issues getting the updates from the internet. What are
> the downsides of adding domain controllers to the group policy to update
> if
> any?

On Thu, 13 Aug 2009 17:27:36 -0400, "PA Bear [MS MVP]" <>
wrote:

>[[ Right pew, wrong church. Forwarded to WSUS newsgroup
>(microsoft.public.windows.server.update_service s) via crosspost as a
>convenience to OP.
>
>On the web:
>http://www.microsoft.com/communities...pdate_services
>
>In your newsreader:
>news://msnews.microsoft.com/microsof...pdate_services
>]]
>
>
>COB wrote:
>> Is it ok to add a group policy to the existing domain controller ou in
>> order
Yes, I can think of no better way.

>> to have security updates and critical updates run from my wsus? My DC
>> servers are having issues getting the updates from the internet. What are
>> the downsides of adding domain controllers to the group policy to update
>> if
Create a different WSUS GPO for DCs (and servers) that does not schedule the
updates. You don't want all the DCs to reboot at the same time do you.
>> any?
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.