Networks

Ask something
Question Locked

WSUS and Domain Controllers/Servers - Help Please!

0 helpful
8 replies

by dishneggo 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Here is my scenario:

Workstations are working flawlessly. However domain servers lost the ability to manually check for update.

Newly installed WSUS server:
-Created OU and added all the workstations from each location to it.
-Created Security group inside OU for each location and added the workstations to it.
-Configured WSUS GP and linked the OU.
Linked the Security group under the Security filtering inside the GP.

What am I missing here?
Any server that is a domain member is located under the Server OU in its respective location.

Any help is greatly appreciated!

8 replies

by cg it

Once installed, no hosts [and that's servers, workstations] should be able to manually update from Microsoft's Windows Update site. All updates come from WSUS so when you go to Microsoft's site, all should get an error stating contact the network admin.

by netwrk_admn

Looks for them inside your WSUS server.

if you can't see them there, these command lines will force it (if your check-in interval is set high).

wuauclt.exe /detectnow

wuauclt.exe /reportnow

by dishneggo

The WSUS is working fine for all workstations.

I want to exclude Servers from WSUS, and the steps listed in my original post, clearly shows I have excluded Servers from the WSUS Group and OU's.

Am I missing something that it is still not excluding the servers?

Thanks all for the replies.

by netwrk_admn

Without know the entire OU structure, is the policy applied on a parent folder where the server OU exists? Therefore it needs to not listen to the parent OU.

I simply have my structure
Computers
> Workstations*
> Servers*

And have applied my OUs at the asterisk level. My only difference is that one group is told it belongs in WORKSTATION folder, and the servers need to go into a SERVER folder on the WSUS.

by cg it

but you can exclude them from WSUS.

Excluded computers in the Software Update Settings window Included and Excluded computer settings.

right from WSUS:

Included Computers adds the machine account to the proper WSUS group and to the security filter of either the Update Services Client Computers or Update Services Server Computers GPOs:

excluding servers is simply not adding them in the included servers setting.

by dishneggo

My OU's are like this:

Chicago Office
-Servers
-CHI-Computers *

Florida Office
-Servers
-FLL-Computers *

The WSUS GP is linked directly to the *

I don't want the servers to pull from WSUS at all..

Thanks!

This discussion is closed to new replies.