How to make workstations use server for updates? (WSUS)

[Mizugori]

I have set up WSUS on the server, synchronized and approved the updates I want all workstations to have, now how do I make the workstations get them? I read that I need to set a GPO on the workstations but am not sure exactly how to configure it. I need to tell the workstations to check with the server, right? Meaning the server cannot just query the workstations and if they don't have an update, push it to them?

thanks!

 

[Zelandakh]

WSUS is a client pull not a server push. You set the WSUS options in the GPO with the server name of the WSUS then make sure that the GPO is running. That's it.

 

[Mizugori]

can you explain how to do that (like in steps)? sorry haven't done this before, would really appreciate it.

 

[Mizugori]

I don't yet speak M$ fluently. The link provided is, I believe, what I am looking to do, but it is by no means comprehensive:

http://technet.microsoft.com/en-us/library/cc720533.aspx

to quote the document, "These procedures also assume that you have already set up and are familiar with Group Policy and use it to manage your network." well, that gets sketchy. I know how to run the GPO management console on the server...

"Perform the next three procedures on an Active Directory-based Group Policy object.
To add the WSUS Administrative Template

1.

In Group Policy Object Editor, click either of the Administrative Templates nodes."

how do I get this far? They are talking about on the server, correct? Do I have to create a new object or use an existing one? Can someone break this down into literal steps that don't assume that you already know what you are doing, since if you did you wouldn't need a guide...

thanks!!

 

[Davetoo]

You might want to start here,

http://www.wsuswiki.com/WhatIsWSUS,

and read through all of the available information. It's very well documented at various locations on the web already, which makes Google your friend.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[sirlojik]

well, type mmc.msc
- go to file ->add/remove snap in
- click add, When the dialog window opens scroll to group policy object editor
- select it and click add
- it will give u option (win2k3) of local computer...click browse and select domain policy
-click finish. click close to close the dialog boxes and add to load the snap in.
-expand and go to computer configuration
-within computer configuration, right click administrative templates.
- select to add/remove template.
- click add when the window opens.
- select wuau from the open file dialog, select ok.
-click close to close the add/remove template window.

-expand administrative templates and scroll to windows update. select it.
-double click configure automatic updates and enable it. then close the properties window.
-double click "specify intranet microsoft update services location"
-type the location of wsus server, enable,apply and close

when done close all the windows

-start->run. type: gpupdate /force

and voila, ur done