Creating Computer Groups on WSUS

A significant improvement of WSUS over earlier versions is the ability to approve updates for specific groups of computers. In other words, you can choose to approve updates for one group of computers but not others.

In order to support this with WSUS, you create computer groups and then move the computers into the appropriate group. How this is done.

Creating Computer Groups

1. If WSUS is not launched, start WSUS on the server by clicking Start → Administrative Tools → Windows Server Update Services.
2. Click the plus (+) symbol next to Computers to open it. Select All Computers. Change the Status drop-down box to Any and click Refresh. This will show a list of all computers known by the WSUS server. At the very least, the name of the WSUS server should be here.
3. Right-click All Computers, and select Add Computer Group.
4. Type in Servers as the Name and click Add.
5. Select Unassigned Computers. Right-click the server name and select Change Membership.
6. Select the Servers group and click OK.
7. Select the Servers group. Select Any from the Status drop-down box, and click Refresh.
   You will see the single server you've added in the Servers group. In the graphic, you may notice that there are two computers, though only one is shown in the Servers group. In my small network, I have a Windows 7 computer that is still in the Unassigned Computers group.