Creating a GPO to Configure Clients to Use WSUS
How to configure Group Policy for all the clients in the domain to use your WSUS server for updates. This exercise assumes you have added the WSUS server and know the name of the server where you installed it.
Configuring Clients to Use WSUS with Group Policy
- Launch the Group Policy Management Console by clicking Start → Administrative Tools → Group Policy Management.
- Browse to your domain. Right-click the domain, and select Create A GPO In This Domain, and Link It Here.
- Type WSUS as the name of the new GPO and click OK.
- Right-click the WSUS GPO and select Edit.
- Select Computer Configuration, and browse to the following GPO setting: Policies → Administrative Templates → Windows Components → Windows Update.
- Select the Configure Automatic Updates selection. Select Enabled. Select the 4-Auto Download and Schedule the Install From the Configure Automatic Updating selection. Click Next Setting.
- On the Specify Intranet Microsoft Update Service Location setting page, select Enabled and type http://ServerName (where ServerName is the name of the server where you installed WSUS). Click Next Setting.
- On the Automatic Updates Detection Frequency setting page, select Enabled, and change Interval Hours to 20. Click OK. At this point, your display will look similar to the following graphic.
- Close the Group Policy Management Editor and the Group Policy Management Console.
In this tutorial:
- Windows 7 and Other software Up to Date
- Understanding Windows Live
- Updates versus upgrades
- Why updates are important
- Windows Update
- Windows Update: The essentials
- Types of Updates
- Completing an Update
- Configuring automatic Updating
- Windows Update Applet and Functions
- Manually Install Updates Using Windows Update
- Action Center
- Updates Do Not Install Properly
- Other Windows Update Settings
- Configuring Windows 7 Update to Use a Proxy Server
- Can't Find Hidden Update
- Viewing and Changing Installed Updates
- Can't Uninstall Current Update
- Upgrade Windows Anytime
- Understanding Windows Server Update Services
- Windows Update Policies
- Updating Drivers
- Using Device Manager to Update Drivers
- Windows Update Driver Settings
- Windows 7 Service Packs
- Basic Service Pack Information
- Installation of Service Packs
- Installing and Removing Software
- Installation via CD or DVD
- Problem Installing from Disc
- Installation via Downloaded Program
- Viewing and Changing Programs
- Uninstalling Software
- Compatibility Issues in 64-Bit Version
- Upgrade Issues with 64-Bit Windows 7
- Other Program Compatibility Issues
- Side-by-Side Installs and Virtual Registries
- Removing Updates from Windows 7
- Thwarting Exploits with DEP
- Microsoft Baseline Security Analyzer
- Picking Computers to Scan
- Vulnerability Checks
- Installing MBSA
- Running the MBSA
- Running the MBSACLI
- MBSACLI Location
- Running in an Isolated Environment
- Using Windows Server Update Services
- WSUS Updates
- WSUS Requirements
- Installing, Configuring, and Using WSUS
- Adding the Application Server and Web Server (IIS) Roles
- Installing the Report Viewer
- Installing WSUS
- Configuring Group Policy Settings for WSUS
- Creating a GPO to Configure Clients to Use WSUS
- Verifying That Clients Are Using GPO Settings for WSUS
- Verifying That Clients Are Using GPO Settings with GPResult
- Creating Computer Groups on WSUS
- Approving Updates in WSUS
- Viewing WSUS Reports