A few WSUS questions..
- Thread starter bledd
- Start date
I have my new WSUS server setup. One thing that is annoying me is that 2 computer belong to the 'unassigned computers' group. I have created 3 other for clients, domain controllers and servers and set policies for each in GP.
In WSUS setup the 2 computers in unassigned appeared before I even checked 'Use group policy or registry settings on computers' from the computers setup.
How do I shift these 2 machines from unassigned? Both machines are just standard XP pro clients
In WSUS setup the 2 computers in unassigned appeared before I even checked 'Use group policy or registry settings on computers' from the computers setup.
How do I shift these 2 machines from unassigned? Both machines are just standard XP pro clients
Highlight the straggling computer objects, right-click, and select "change membership".
You cant do that as its managed through group policy. Looks like it has updated and moved one of the machines to Clients group.
The other one will probably move by tomorrow morning too (and the rest of client machines and servers will be in their correct groups) Now just to see if it does download updates at 2am (then updates machines at 10pm)
I'm just looking into this, but probably doing something silly as I'm stuck.
How do I change the server an XP client looksup when it goes for downloads (how do I add it to the wsus computer groups) - that is on a seperate network within my building (test network)?
How do I change the server an XP client looksup when it goes for downloads (how do I add it to the wsus computer groups) - that is on a seperate network within my building (test network)?
Is the test network set up with an Active Directory? If so then you apply the "Specify intranet update service location" attribute in a GPO that applies to the OU the machine is in.
If not then apply it using the sample registry information I quoted in an earlier post.
If not then apply it using the sample registry information I quoted in an earlier post.
Without them being constrained by the policies of a domain just how do you expect this to be possible?
As said, just set up AD, if you have the licenses for it there is little excuse for any business environment not to be running AD.
.
For not using one? They won't give a reason, other then 'it's not how we do things'.
The actual reason is that they are an accutely paranoid company who trust no one, including those that work for them, and don't know enough about domains/AD(and GP) to implement one, so would have to get someone else to do it, thereby relinquishing some control.
The actual reason is that they are an accutely paranoid company who trust no one, including those that work for them, and don't know enough about domains/AD(and GP) to implement one, so would have to get someone else to do it, thereby relinquishing some control.
Code:
wuauclt /resetauthorization /detectnowWould be the command I'd use.
Also, if you copied my registry entry word for word, then the first automatic sync will be at 7am. So assuming you applied the changes today, they might not automatically report to WSUS until tomorrow (running the above command will sort that by forcing a run now).