WSUS using GPO, what happens when not connected to domain

Discussion in 'Update Services' started by jroundy, Sep 26, 2007.

  1. jroundy

    jroundy Guest

    We are working on deploying WSUS 3.0. We would like to use a group policy to
    have the computers on the network update from the WSUS server instead of
    Microsoft Update. Our concern is that some of our staff can have their
    systems off-site for up to 9 weeks at a time. How is windows/microsoft
    update handled during that time. Does the Windows Update Administrative
    template have a way of detecting if they are connected to the domain and can
    reach the WSUS server?

    I noticed that windows firewall has two different policy areas one for
    standard profile and one is a domain profile. I have not found this with the
    WSUS 3.0 administrative template.

    jroundy, Sep 26, 2007
    1. Advertisements

  2. These systems are not good candidates for using WSUS.
    It isn't. The clients will not receive updates and will not be updated.
    It does not.
    That's because what you found with the firewall is a specific implementation
    capability of the firewall policy. That capability does not exist with WSUS.

    If the systems are off-site and disconnected from the Internet, this
    probably is not an issue, since a disconnected system has lower risk.

    If the systems are off-site and regularly connected to the Internet (and,
    even better, regularly connected via VPN to your corporate network), then
    you can place a second WSUS server on your network specifically configured
    to support the needs of these clients.

    Alternatively, you can configure them to continue using Automatic Updates
    for the installation of security and critical updates.

    Lawrence Garvin, M.S., MCTS, MCP
    MVP - Software Distribution (2005-2007)
    MS WSUS Website:
    My Websites:;
    My MVP Profile:
    Lawrence Garvin [MVP], Oct 1, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.