Part 3: Client configuration using GPO
We already installed the WSUS Server and we want to use it, right? So we want our client machines to get update to our new and shiny WSUS server.
We can do that thru GPO: So on our domain controller, go to the Server Manager, expand Features, Group Policy Management. Expand our Forest, domains and on the level of organizational unit that you want to apply the new GPO, right click and choose Create a GPO in this domain, and Link it here…
Because I want to do this domain wide, I’m applying the policy in the entire domain. My new GPO will now be called as Windows Update Service Configuration. Its really better to name your GPO verbosely, after a good night sleep you will forget this 😀
Click OK if you are finished.
After creating the GPO, it would appear on the tree. Right click it and from the context menu, chose edit.
Navigate to the Configuration, Policies, and then Administrative Templates, Windows Components and to Windows Update.
You will now see a couple of settings in there, one of the important things in there for this scenario was the Specify intranet Microsoft update service location. Let us now enable it by right clicking it and then click properties.
On this window, specify what is the Update Service URL.
Type it there, and click apply and OK.
Fine tune this GPO according to your enterprise policies, apply it and your clients are now connecting to your WSUS server!
PS. If you are like me that doesn’t want to wait for a GPO to be replicated to the client, you can always do the gpupdate /force on an elevated command prompt. To do that, go to your Start Menu, find the command prompt and right click, run as administrator.
Type-in gpupdate /force then hit enter. After the policies has updated, the clients are now connecting to our WSUS server. (You may need to restart the client for the settings to take effect.