ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    WSUS Questions

    Scheduled Pinned Locked Moved IT Discussion
    14 Posts 3 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DenisKelleyD
      DenisKelley
      last edited by

      The other setting(s) are:

      1. No auto-restart with logged on users
      2. Reschedule Automatic Updates scheduled installations. This is used for machines which you set it to update automatically. Not the way you have it configured in your example, just noting it.
      1 Reply Last reply Reply Quote 2
      • DashrenderD
        Dashrender
        last edited by

        @IRJ said:

        1. Nofiy for the install in the GPO doesnt mean its going to notify me, if I approve it via WSUS, correct? If I dont approve it via WSUS is it still going to bug the user and say updates need to be installed?

        If you DON'T approve it, it will not tell the end users about it. As far as the users will know there is no update. When you approve it, then they will be notified that it's available for them.

        1 Reply Last reply Reply Quote 2
        • IRJI
          IRJ @DenisKelley
          last edited by

          @DenisKelley said:

          1. Nofiy for the install in the GPO doesnt mean its going to notify me, if I approve it via WSUS, correct? If I dont approve it via WSUS is it still going to bug the user and say updates need to be installed? **Yes, since the PC/Server is "looking" at WSUS and not MS, it will believe WSUS that an update is available when you approve it. And the setting above means that it will download the update from WSUS and then notify you that there are updates that need to be installed. It won't install automatically. **

          What about the scheduling option? How does that work?

          I just want to approve it from WSUS and have everything donwloaded and then schedule to deploy a few PCs at a time

          DenisKelleyD 1 Reply Last reply Reply Quote 0
          • DashrenderD
            Dashrender
            last edited by

            You can't do a few PCs at a time unless you create groups for the PCs and only put a few PCs in each group.

            If you want to auto deploy the updates you need to change your
            Configure Automatic Updates -> 4 auto download and schedule the install

            Then list the time you want to schedule them.

            You'll have to create a different OU for each group if want to have them go at different times (that would be a pretty big pain).

            IRJI 1 Reply Last reply Reply Quote 1
            • IRJI
              IRJ @Dashrender
              last edited by

              @Dashrender said:

              You can't do a few PCs at a time unless you create groups for the PCs and only put a few PCs in each group.

              If you want to auto deploy the updates you need to change your
              Configure Automatic Updates -> 4 auto download and schedule the install

              Then list the time you want to schedule them.

              You'll have to create a different OU for each group if want to have them go at different times (that would be a pretty big pain).

              I have already created OUs for each group. I have like 20 different groups. I just have to change the GPO to 4 instead of 3 on all of them.

              1 Reply Last reply Reply Quote 0
              • IRJI
                IRJ
                last edited by

                This is what I have so far. I will actually have more groups once I reboot the PCs tonight and they all update group policy.

                2014-03-27_15-36-56.png

                1 Reply Last reply Reply Quote 0
                • DenisKelleyD
                  DenisKelley @IRJ
                  last edited by

                  @IRJ said:

                  @DenisKelley said:

                  1. Nofiy for the install in the GPO doesnt mean its going to notify me, if I approve it via WSUS, correct? If I dont approve it via WSUS is it still going to bug the user and say updates need to be installed? **Yes, since the PC/Server is "looking" at WSUS and not MS, it will believe WSUS that an update is available when you approve it. And the setting above means that it will download the update from WSUS and then notify you that there are updates that need to be installed. It won't install automatically. **

                  What about the scheduling option? How does that work?

                  I just want to approve it from WSUS and have everything donwloaded and then schedule to deploy a few PCs at a time

                  Like Dashrender noted, you'll need different Group Policies. They way it works is when you approve the group in WSUS, then the GP tied to that group gets enforced. So if you had TEST Group 1 with download and install automatically at 3AM, then once you approve an update for that group, the PC will download the update (next time it talks to WSUS), then at 3AM, it will then install the update.

                  If you do install and notify for a particular GP, then after approving, the PC or Server will just note that you are ready to install. One of the best how-to's talking about all of this is available on Microsoft called WSUS 3.0 Install Guide. Your version may be different, but this was a great guide I used years back when learning. http://www.microsoft.com/en-us/download/details.aspx?id=913

                  1 Reply Last reply Reply Quote 0
                  • IRJI
                    IRJ
                    last edited by

                    I am changing all the GPOs to 4 - Auto download and schedule the install

                    1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender
                      last edited by

                      That. Is a lot of groups, why so many?

                      IRJI 1 Reply Last reply Reply Quote 0
                      • IRJI
                        IRJ @Dashrender
                        last edited by

                        @Dashrender said:

                        That. Is a lot of groups, why so many?

                        Different branches and I am an AD Nazi. I like to have alot of OUs

                        1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender
                          last edited by

                          Uh.. OK... You can apply the GP to the level about the 'list'. If you're OK with them all being told to install at the same time. That would cut down on the number of GPOs you have to manage.

                          IRJI 1 Reply Last reply Reply Quote 0
                          • IRJI
                            IRJ @Dashrender
                            last edited by

                            @Dashrender said:

                            Uh.. OK... You can apply the GP to the level about the 'list'. If you're OK with them all being told to install at the same time. That would cut down on the number of GPOs you have to manage.

                            I staggered the GPOs between midnight and 5am. That was part of the reason I created different deployment groups.

                            1 Reply Last reply Reply Quote 0
                            • 1 / 1
                            • First post
                              Last post