Installing and Managing Windows Update Service: Part 3 of 4

Part 3: Client configuration using GPO

We already installed the WSUS Server and we want to use it, right? So we want our client machines to get update to our new and shiny WSUS server.

We can do that thru GPO: So on our domain controller, go to the Server Manager, expand Features, Group Policy Management. Expand our Forest, domains and on the level of organizational unit that you want to apply the new GPO, right click and choose Create a GPO in this domain, and Link it here…

\

Because I want to do this domain wide, I’m applying the policy in the entire domain. My new GPO will now be called as Windows Update Service Configuration. Its really better to name your GPO verbosely, after a good night sleep you will forget this 😀

Click OK if you are finished.

After creating the GPO, it would appear on the tree. Right click it and from the context menu, chose edit.

Navigate to the Configuration, Policies, and then Administrative Templates, Windows Components and to Windows Update.

You will now see a couple of settings in there, one of the important things in there for this scenario was the Specify intranet Microsoft update service location. Let us now enable it by right clicking it and then click properties.

 

On this window, specify what is the Update Service URL.

Type it there, and click apply and OK.

 

 

 

 

 

 

 

 

 

 

 

Fine tune this GPO according to your enterprise policies, apply it and your clients are now connecting to your WSUS server!

PS. If you are like me that doesn’t want to wait for a GPO to be replicated to the client, you can always do the gpupdate /force on an elevated command prompt. To do that, go to your Start Menu, find the command prompt and right click, run as administrator.

Type-in gpupdate /force then hit enter. After the policies has updated, the clients are now connecting to our WSUS server. (You may need to restart the client for the settings to take effect.

Advertisements

Published by

johndelizo

John is currently creating digital assets that protects people and their future, a technical trainer and a full time geek specializing on development and deployment of innovations created with .NET framework on Windows platform as well as Windows infrastructure projects. He is the primary contact of the Philippine Windows Users Group, a contributor at the Microsoft Philippines Community forums and regularly conducts community sessions as well as other Microsoft technology events. John owns the Busy Saving The World Techblog.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s