Discussions

How to setup automatic updates to go to all PC's without going to each PC

+
0 Votes
Locked

How to setup automatic updates to go to all PC's without going to each PC

brjames3
How do I setup automatic updates to occur and download to all PC's in my network without going to each PC and using the gpedit.msc command to setup a policy. I just installed my WSUS server on a Windows 2003 server. Now I want to push the downloads to each PC. I read instructions to go to the WIN XP PC and setup the automatic updates but I cannot go to all PC"s to do this. Please help, I am new at this.
  • +
    0 Votes
    christianshiflet

    Is your network a domain? If so, all computers that have been joined to the domain can be controlled through a GPO (group policy object) from the domain controller. You can configure Automatic Updates from Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update. Once configured, force a group policy update across the domain or wait a while for the automatic GP update. Now each domain computer should abide by your Windows Update group policy. Be careful, however, about isolating any servers from this policy as they should be updated a bit more cautiously.

    +
    0 Votes
    huynhkhoa2

    1/I assume that you already have GPO setting for all the computer in your network connected to yourss WSUS.
    2/In WSUS, you should have all the computers listed in group "ALL COMPUTERS", you can subgroup from the main group.
    3/Go to the "Options" session, click Automatic Approvals. Click on New Rule that setting Defaul Automatic Approval Rule when an update is in Critical Update etc.... select Approve the update for GROUP that you what (all computers etc...except for SERVERS :) )
    Hope it helps. I'm at my office and remote push down all updates to all computers in network.

    +
    0 Votes
    brjames3

    I do not want to sound like I do not know what I am doing but I don't. On my WSUS server under all computers There are none listed. I set up a group, and have waited for it to populate a list of computers. Nothing have shown for hours. I can not do anything else until I can get the computers to list in all computers.

    +
    0 Votes
    shasca

    This site has helped with every SUS/WSUS problem I've had.

    http://www.wsus.info/forums/

    +
    0 Votes
    ugadata

    to get computers to show up in groups under WSUS.

    First a computer needs to be configured to use the WSUS server using the Group Policy Editor. one of the settings under the WSUS configuration is what group the computer is in.

    If you chose to not configure the "WSUS Group" from the Group Policy Editor, then as each computer is configured to use the WSUS server it will show up under All Computers and/or Unassigned when viewed through the WSUS Server. You can then create the groups you want and right click on a computer to assign it to the WSUS group of your choice.

    +
    0 Votes
    huynhkhoa2

    I don't know if you have setup WSUS GPO which linked to all computers (In DC Server). By doing this, all the computers would know where the WSUS at (WSUS's server name or IP address, and port number), and all the PC will be listed in All Computers in WSUS.
    If you already have GPO setup then you can check WindowsUpdate.log file in C\Windows directory on any computer to see any error showed in the log.
    If you have not setup the GPO then you need to go to DC server and create new GPO for WSUS that apply to all the computers at boot up time.
    Hope it helps.

    +
    0 Votes
    ugadata

    Being part of a Domain has already been mentioned.

    Another option is use use the Group Policy Editor remotely. As you set up the MMC snap in, point it to a different PC. This would need to be done for each PC on the network, (1 snap in for each PC). Your still doing each PC manually but you don't have to "touch" each PC.

    Along the same lines if you have all XP machines you could use Remote Desktop to run the Group Policy Editor locally on each PC.

    A little more hacky is to setup one PC using the Group Policy Editor and once the WSUS setting are completed, open up the registry editor and find the key with the WSUS settings in it and export just the WSUS settings and save it to a shared folder on the network. Then using Remote Desktop find the saved Reg file and double click it (or right click and choose merge)

  • +
    0 Votes
    christianshiflet

    Is your network a domain? If so, all computers that have been joined to the domain can be controlled through a GPO (group policy object) from the domain controller. You can configure Automatic Updates from Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update. Once configured, force a group policy update across the domain or wait a while for the automatic GP update. Now each domain computer should abide by your Windows Update group policy. Be careful, however, about isolating any servers from this policy as they should be updated a bit more cautiously.

    +
    0 Votes
    huynhkhoa2

    1/I assume that you already have GPO setting for all the computer in your network connected to yourss WSUS.
    2/In WSUS, you should have all the computers listed in group "ALL COMPUTERS", you can subgroup from the main group.
    3/Go to the "Options" session, click Automatic Approvals. Click on New Rule that setting Defaul Automatic Approval Rule when an update is in Critical Update etc.... select Approve the update for GROUP that you what (all computers etc...except for SERVERS :) )
    Hope it helps. I'm at my office and remote push down all updates to all computers in network.

    +
    0 Votes
    brjames3

    I do not want to sound like I do not know what I am doing but I don't. On my WSUS server under all computers There are none listed. I set up a group, and have waited for it to populate a list of computers. Nothing have shown for hours. I can not do anything else until I can get the computers to list in all computers.

    +
    0 Votes
    shasca

    This site has helped with every SUS/WSUS problem I've had.

    http://www.wsus.info/forums/

    +
    0 Votes
    ugadata

    to get computers to show up in groups under WSUS.

    First a computer needs to be configured to use the WSUS server using the Group Policy Editor. one of the settings under the WSUS configuration is what group the computer is in.

    If you chose to not configure the "WSUS Group" from the Group Policy Editor, then as each computer is configured to use the WSUS server it will show up under All Computers and/or Unassigned when viewed through the WSUS Server. You can then create the groups you want and right click on a computer to assign it to the WSUS group of your choice.

    +
    0 Votes
    huynhkhoa2

    I don't know if you have setup WSUS GPO which linked to all computers (In DC Server). By doing this, all the computers would know where the WSUS at (WSUS's server name or IP address, and port number), and all the PC will be listed in All Computers in WSUS.
    If you already have GPO setup then you can check WindowsUpdate.log file in C\Windows directory on any computer to see any error showed in the log.
    If you have not setup the GPO then you need to go to DC server and create new GPO for WSUS that apply to all the computers at boot up time.
    Hope it helps.

    +
    0 Votes
    ugadata

    Being part of a Domain has already been mentioned.

    Another option is use use the Group Policy Editor remotely. As you set up the MMC snap in, point it to a different PC. This would need to be done for each PC on the network, (1 snap in for each PC). Your still doing each PC manually but you don't have to "touch" each PC.

    Along the same lines if you have all XP machines you could use Remote Desktop to run the Group Policy Editor locally on each PC.

    A little more hacky is to setup one PC using the Group Policy Editor and once the WSUS setting are completed, open up the registry editor and find the key with the WSUS settings in it and export just the WSUS settings and save it to a shared folder on the network. Then using Remote Desktop find the saved Reg file and double click it (or right click and choose merge)