Re: Policy for Domain Controllers to run WSUS updates

[[ Right pew, wrong church. Forwarded to WSUS newsgroup
(microsoft.public.windows.server.update_services) via crosspost as a
convenience to OP.

On the web:
http://www.microsoft.com/communities...pdate_services

In your newsreader:
news://msnews.microsoft.com/microsof...pdate_services
]]


COB wrote:
> Is it ok to add a group policy to the existing domain controller ou in
> order
> to have security updates and critical updates run from my wsus? My DC
> servers are having issues getting the updates from the internet. What are
> the downsides of adding domain controllers to the group policy to update
> if
> any?

On Thu, 13 Aug 2009 17:27:36 -0400, "PA Bear [MS MVP]" <>
wrote:

>[[ Right pew, wrong church. Forwarded to WSUS newsgroup
>(microsoft.public.windows.server.update_service s) via crosspost as a
>convenience to OP.
>
>On the web:
>http://www.microsoft.com/communities...pdate_services
>
>In your newsreader:
>news://msnews.microsoft.com/microsof...pdate_services
>]]
>
>
>COB wrote:
>> Is it ok to add a group policy to the existing domain controller ou in
>> order
Yes, I can think of no better way.

>> to have security updates and critical updates run from my wsus? My DC
>> servers are having issues getting the updates from the internet. What are
>> the downsides of adding domain controllers to the group policy to update
>> if
Create a different WSUS GPO for DCs (and servers) that does not schedule the
updates. You don't want all the DCs to reboot at the same time do you.
>> any?
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.