client side targeting and server-side targeting...

Discussion in 'Update Services' started by dchrist, Apr 2, 2007.

  1. dchrist

    dchrist Guest

    Hello,

    I am new to the WSUS world so please bear with me. I've set up a WSUS 3.o
    server at a school district. We originally set up client side targetting and
    made a GPO pointing to certain groups.

    We have several labs that we would like to do server-side targeting with.
    In other words, create the groups on the WSUS server and then apply the
    updates to say "lab_28". At this school we have to take off "deep-freeze" for
    the evening and leave the machines on all night.
    In the client-side targeting they are set to update Tues. mornings at 3 am.
    With server-side targeting....how do you push the updates out????

    I realize this is a lot. I certainly appreciate any help that I receive!
    Thanks,
    Dan
     
    dchrist, Apr 2, 2007
    #1
    1. Advertisements

  2. dchrist

    Wade Godfrey Guest

    I think you are misunderstanding what server-side targeting is. The
    difference between client-side and server-side targeting is for
    client-side, the target group is entered into the group policy setting
    for the client whereas for server-side, there is no target group entered
    on the group policy setting, the "Move Computers" task is used on the
    server itself to move the computers from "Unassigned" into their proper
    group.

    Installation of the updates will be the same whether you use client-side
    or server-side targeting. Once the updates are approved for a particular
    group, the next time a client checks in with the WSUS server it will see
    that certain updates are available and download and install them
    according to whatever policy you have set up. There is no push from the
    server, only pull from the client.
     
    Wade Godfrey, Apr 2, 2007
    #2
    1. Advertisements

  3. dchrist

    dchrist Guest

    I had a decent understanding of this concept, but am now clearer. Thank you.
    At one point we had the policy applied to a lab but then took it off again
    because we have deep freeze and had no need to waste bandwidth. Now in that
    lab, out of
    25 computers only 4 are showing up in the WSUS console or should I say
    actually reporting back to the WSUS server. I'm not sure how to go about
    figuring out the next step.
    That is why I tried server-side targeting for this lab, because we didn't
    want updates pushed out all of the time. We have staff comps set up with the
    policy but the labs in server-side targeted groups.
    My guess is that if I reapply the gpo to the Lab - OU then they will all
    show up in the WSUS console. I just don't know how to get them to report
    when they don't have the policy applied.....????
     
    dchrist, Apr 2, 2007
    #3
  4. dchrist

    Wade Godfrey Guest

    Well, if the policy isn't getting applied, then the clients have no
    knowledge of your WSUS server. To check to see if your policy is getting
    applied, you can check the following.

    1. Inspect the registry keys in
    HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate and
    HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU to see if they
    are getting the settings.
    2. Run the Client Diagnostic Tool, downloadable from
    http://download.microsoft.com/downl...-a467c768d8ef/WSUS Client Diagnostic Tool.EXE
    and post the results for analysis.
    3. Inspect the windowsupdate.log in C:\Windows on one of the client
    machines that is not reporting in and post the contents from the last
    detection cycle back to this thread for analysis.

    I suspect that your Deep Freeze may be interfering with your
    communications with the WSUS server. We have had similar problems with
    Clean Slate in our district.
     
    Wade Godfrey, Apr 2, 2007
    #4
  5. dchrist

    dchrist Guest

    Thanks for the info. I will do these on Wednesday when I am back in the
    office. I have been looking over my documentation and thinking about the
    posts. I've been confused by creating groups in only on the server and
    thinking that is one way to get the clients to contact the server. But that
    won't happen. I'll run these ideas on Wed.
    Thanks.
    Dan
     
    dchrist, Apr 3, 2007
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.