WSUS Computer Groups

[hamesy]

Is is possible to exclude computers groups within WSUS from the Computers needing this update report?

Little background, we've got a few PCs that cannot be updated for whatever reason and we've placed these within a computer group in WSUS called Do Not Update. However when I look at the status of an update, there's a report you can run telling you computers needing this update and it's showing these computers that cannot be updated. Hope that makes sense.

 

[Bry]

dont think you can. there is a powershell module called poshwsus you could use and write your own miniscript to do the same thing.

im assuming you using group policy to push out your wsus settings ? might just be easier to create a separate ou for your computers and have them apply a do not update policy and then delete them from wsus console...

 

[Pvt_Ryan]

Yes and no..

There is no way to do it via wsus... however if you are using the sql server install you should be able to write a custom report..

If you have an enterprise agreement i'd strongly recommened looking at cfgmgr it will hook into wsus and give you much finer control and reporting.

 

[FlailingNinja]

Could you not just point them back to the MS update site rather than the wsus server then set them to manual updates rather than auto? If you're not using wsus to update them then nothing lost?