How to make workstations use server for updates? (WSUS)

[Mizugori]

I have set up WSUS on the server, synchronized and approved the updates I want all workstations to have, now how do I make the workstations get them? I read that I need to set a GPO on the workstations but am not sure exactly how to configure it. I need to tell the workstations to check with the server, right? Meaning the server cannot just query the workstations and if they don't have an update, push it to them?

thanks!

 

[TheKub]

Correct, you need to create and assign a GPO that points your workstations to your WSUS server. WSUS is not a push operation you configure a number of settings in the GPO that configure how\when\etc the machine looks for updates via your server.

If your not familiar with GPOs make sure you test it before you roll it out to the entire domain\OU. Also, if you dont have it already get the group policy management console (GPMC) it makes creating\managing GPOs sooo much better.

Pretty much all the relevent settings will be under Computer Config->Windows Components->Windows Update

 

[MedicBob]

Use GPO if you are in a domain, I assume you are. It is pretty easy and there are several settings in the GPO for the updates.

If not in a domain, you can still use gpedit.msc, local GPO, to set the same settings or set them in the registry.

 

[rudder]

Originally posted by: MedicBob
set them in the registry.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://yourserver"
"WUStatusServer"="http://yourserver"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000017
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"RescheduleWaitTime"=dword:00000005