"Specify Intranet Microsoft Update service location"

[yukichigai]

I've been toying with the Active Directory policy, specifically with regards to Windows Updates, since when it isn't configured it defaults to auto-download on every machine. I found an interesting setting -- "Specify Intranet Microsoft Update service location" -- which claims to allow one computer to function as an intranet host of updates, so that they only have to be downloaded once rather than for each machine individually. Since our internet downstream isn't anything amazing, I figured this would be the option to take.

However, I can't find anything about how to configure the server specified in the policy. Do you have to install software, configure the local policy? Does it matter that the server may not be running the same version of Windows as the workstations which are updating? If it's just as easy as enabling the policy, well hot dog. But otherwise, what do I have to do to make it work?

 

[gaidin123]

Heya, what you want is WSUS=windows server update services. It will let you run an internal windows update server that will then let you approve updates/patches/drivers as you see fit and deploy them to your machines, groups of machines, or an individual machine when you want. It's free from MS and you can easily get it set up and working in your domain in less time than it will take for all you boxes to refresh their group policy. You also get some nice reporting features with it to check on patch levels and machine update status (when it last checked in, etc.).

Gaidin

Edit:
http://www.microsoft.com/windowsserversystem/updateservices/downloads/wsus.mspx

 

[Rogue]

Originally posted by: gaidin123
Heya, what you want is WSUS=windows server update services. It will let you run an internal windows update server that will then let you approve updates/patches/drivers as you see fit and deploy them to your machines, groups of machines, or an individual machine when you want. It's free from MS and you can easily get it set up and working in your domain in less time than it will take for all you boxes to refresh their group policy. You also get some nice reporting features with it to check on patch levels and machine update status (when it last checked in, etc.).

Gaidin

Edit:
http://www.microsoft.com/windowsserversystem/updateservices/downloads/wsus.mspx

We just deployed this last week. The install was quick and easy, the GPO went out without a hitch and the best part is, it patches your Office installations as well. Big improvement over it's predecessor (SUS).