Adding Computers to WSUS 3.0 SP1 (Windows Server 2008)
This is going to cover how to add Computers to update services.
The WSUS Help is very very good and its your best friend! So dont forget him
Microsoft suggests to use Group Policy for setting up computers and WSUS in clients. So we set our WSUS details in our Group Policy Object (GPO).
1) Create a new GPO
[Do not edit the default Domain Controller Policy or Default Domain Policy]
2) Edit the newly created GPO
a) Go to Computer Configuration-->Policies-->Windows Components-->Windows Update
b) On the Settings tab (right side)
--> Enable client-side targeting and specify the Computer Group that machines need to be added
--> Under Specify Intranet Microsoft Update Service location, enable it and give your WSUS
address for both intranet update service and intranet statistics server
3) Specify the Security Filtering for this newly created GPO to the specific Computer or Groups or Users you want it to reflect
4) Link this newly created GPO in your Domain and make it Enforced
5) Restart (may or may not be required) the client machine to which you have set this GPO
6) Login to the client machine and now check the registry settings in the client machine
Below you have the location you want to check,
And check its values,
The TargetGroup, WUServer and WUStatusServer should have the values you set in your GPO
So, being said that all are good, now check whether you have set Windows Update to Automatic mode, if not, set it and then Check For Updates. You may be prompted an update to the Windows Update, install it.
Now, go to your server, fire up WSUS Administration Console and go to,
Update Services-->Server-->Computers
Check whether you can actually see the Computer in which you have set up the Intranet Update Service. If you cannot see,wait for sometime, something will appear there, lol (you may have to Refresh it).
If you see your Computer, but then if it tells your that its status is not yet reported, then, run this on the client Computer (on the command prompt),
wuauclt /resetauthorization /detectnow
You should now be able to view your computer in the WSUS Administration Console
And finally here is my status of my Computer,
So now, you can play with your WSUS and Windows Server 2008
Tag(s):
Other related posts:
DreamSpark NZ Update : DreamSpark is here for Auckland and Canterbury Universities
IE8 - Always start in InPrivate Browsing mode
IE8, Tab Grouping and Task Manager
Comment by rafeeq, on 4-JUL-2009 19:19
hi,Chandran
It funtastic,it will be usefull for all people who they are wprking as networka admin in windows flateform.
thanks and regards
rafeeq
Comment by oscar, on 2-AUG-2009 19:03
Hi, i created the gpo but cannot find what your referring to a) Go to Computer Configuration-->Policies-->Windows Components-->Windows Update
When i edit the gpo i don't see policies....
Also i dont understand where to point to for the intranet site cause wsus 3.0 removes the intranet site. Can someone please help me with this?
Comment by Rick, on 25-AUG-2009 06:50
Oscar, I cant help with the Intranet question, but as to the GPO part, if you are on server 08, the GPO is actually listed under Computer Config -> Policies -> Administrative Templates -> Windows Components -> Windows Updates
Hope that helps!
Add a comment
Please note: comments that are inappropriate or promotional in nature will be deleted.
E-mail addresses are not displayed, but you must enter a valid e-mail address to confirm your comments.
Are you a registered Geekzone user? Login to have the fields below automatically filled in for you and to enable links in comments.
If you have (or qualify to have) a Geekzone Blog then your comment will be automatically confirmed and shown in this blog post.
Comment by infosys, on 13-DEC-2008 04:16
wsus 3.0 is cool to monitor