WSUS targeting question

Hello,
I have installed WSUS 3 and configured the Computer Groups with the
same name as the Organization Units in the Active Directory. For each
OU in the Active Directory, there is a Computer Group in the WSUS. Now
I want to do targeting with Group Policies.

Do I have to create one Group Policy per OU or is there a possibility
to tell the WSUS to use the same Computer Group name for each computer
as the OU that it is located in in the Active Directory (variable in
Group Policy property "Target Group Name for this Computer" or
similar)?

Thank you very much

PR

wrote:

> I have installed WSUS 3 and configured the Computer Groups with the
> same name as the Organization Units in the Active Directory. For each
> OU in the Active Directory, there is a Computer Group in the WSUS. Now
> I want to do targeting with Group Policies.
>
> Do I have to create one Group Policy per OU or is there a possibility
> to tell the WSUS to use the same Computer Group name for each computer
> as the OU that it is located in in the Active Directory (variable in
> Group Policy property "Target Group Name for this Computer" or
> similar)?

If you want to use pure group policy, you will need one GPO per OU. It /might/
be possible to automate it using scripting, but unless you have a very large
number of OUs it'll be simpler to use separate GPOs.

If you have more than a few OUs you might want to save yourself some work by
having a shared GPO, applied to all the OUs, with all the settings except for
the target group. Then the individual GPOs only need to configure the target
group. That would also make life easier if you later decide to change some of
the other settings. :-)

(Of course your server OU will want different settings so you'll want just a
single GPO for that one.)

Harry.