It is expected that our network will use two different update policies: one for servers (Servers) and another one for workstations (Workstations). The policy of using the WSUS server by its clients depends largely on the organizational structure of the Active Directory OU (organization units) and update installation rules in the company.
In this article we will try to understand the basic principles of using AD policies to install Windows updates.
Environment: Windows Server 2003 single domain Domain Functional: Level Windows Server 2003 Forest Functional Level: Windows Server 2003 Problem Description: We have a working GPO for the Internet explorer Home page URL.
to an Active Directory domain, and if this policy has been set to 0 or to a value greater than 77 hours, this setting will not be honored and replaced by 77 hours after August 2014.
In this article we will consider how to configure clients of the WSUS server using Active Directory GPO (Group Policies).
AD Group Policies allow the administrator to automatically assign computers to different WSUS groups, saving him the trouble of manually moving the computers between groups in the WSUS console and support these groups up-to-date.
Assigning clients to different target WSUS groups is based on labels on the client itself (labels are set by a GPO or a direct registry modification).
This kind of client association to the WSUS groups is called client side targeting.