0

I have a newly setup WSUS 2016 server. The GPO's already have been created and linked to my AD OU where the computers/servers are located.

I also see the computers/servers in my WSUS server.

My question is whether it is possible to group the updates by computer/server? Since I can't find the possibility. This is because I want to, for example, install all updates on a specific server and not on others (which are also located in the same group).

I've done some research but I can't seem to find a specific answer to this.

Any help would be greatly appreciated!

Joren
  • 1
  • 1
  • You may like to upvote the answer if it helped you! Please see how to upvote an answer here -> https://meta.stackexchange.com/questions/173399/how-to-upvote-on-stack-overflow; You may also like to accept the answer if it helped you! Please see how to accept an answer here -> https://meta.stackexchange.com/questions/5234/how-does-accepting-an-answer-work – Am_I_Helpful Mar 26 '18 at 16:40

1 Answers1

0

My question is whether it is possible to group the updates by computer/server? Since I can't find the possibility. This is because I want to, for example, install all updates on a specific server and not on others (which are also located in the same group).

This group (target-group) setting cannot control selective installation of patches in computer/server having the same client-side targeting. If you've approved X updates for this particular target-group, all the updates relevant to the OS approved in the set of X updates will be downloaded by client system when it communicates to WSUS the next time.

The better option for your case would be to create different target groups for different types of servers/desktops. Then you selectively install few updates on a few servers (in the first group), and deploy all the updates pertaining to other servers/desktops (in the second group) completely. You'll have to divide the set of systems into 2 OUs each with distinct GPO setting as described below.

This setting of client-side targeting can be done in AD by creating 2 separate OUs and using 2 GPOs (one for each OU) to achieve this:

(i) first GPO setting with the target-group set as selective, categorise the selective updates required systems in this separate OU and deploy the selective updates using WSUS,

(ii) the other GPO which you apply to the 2nd OU, categorise the systems marked to receive all the updates in this 2nd OU (having remaining servers) and GPO setting having second target-group.

Am_I_Helpful
  • 499
  • 1
  • 6
  • 17