Applying Microsoft Updates using Windows Server Update Services, Group Policy and

Spiceworks

Evaluate

Plan

Install WSUS

Deploy GPO’s

Approve Updates

Optional ◦ Schedule in Spiceworks

Group Policy Design Geographic Region

Business Role

Group Policy Design Geographic Region

Business Role

Group Policy Object Settings

Computer Groups

When you configure the Group Policy settings for WSUS, use a Group Policy object (GPO) linked to an Active Directory container appropriate for your environment. Microsoft does not recommend editing the Default Domain or Default Domain Controller GPOs to add WSUS settings.

In a simple environment, link the GPO with the WSUS settings to the domain. In more complex environment, you might have multiple GPOs linked to several organizational units (OUs), which enables you to have different WSUS policy settings applied to different types of computers.

After you set up a client computer, it will take a few minutes before it appears on the Computers page in the WSUS console. For client computers configured with an Active Directory-based GPO, it will take about 20 minutes after Group Policy refreshes (that is, applies any new settings to the client computer). By default, Group Policy refreshes in the background every 90 minutes, with a random offset of 0 to 30 minutes. If you want to refresh Group Policy sooner, you can go to a command prompt on the client computer and type: gpupdate /force.

Gpupdate /force (from CMD)

C:\WINDOWS\system32\wuauclt.exe /reportnow (Start/Run Now)

C:\WINDOWS\system32\wuauclt.exe /detectnow (Start/Run Now)

Step-by-Step Guide to Getting Started with Microsoft Windows Server Update Services 3.0 SP1 http://go.microsoft.com/fwlink/?LinkId=71190

Planning Your Group Policy Design http://technet.microsoft.com/en-us/library/cc759180(WS.10).aspx

Additional Resources for Group Policy Infrastructure http://technet.microsoft.com/en-us/library/cc780744(WS.10).aspx