disturbedone
Vendor
Here's a query regarding the computers that appear in the Computer Groups on the WSUS server....
First, the scenario
Have the following OUs
* domain.local\Workstations\Staff_Desktops
* domain.local\Workstations\Staff_Laptops
* domain.local\Decommissioned (a temp place for disabled computers before deleting after X months)
GPO for Windows Update is applied to the domain.local\Workstations OU (so it is inherited by Desktops & Laptops) but the Decommissioned OU does not get this GPO.
The GPO points the computers to a Computer Group called 'Staff Workstations' and works fine. All computers update from WSUS.
And the issue...
Over time old computers have been turned off but not moved to the Decommissioned OU and still appear in WSUS saying they haven't contacted the server in a long time. I've now moved these computers to the Decommissioned OU (they won't receive the GPO because they're not turned on) but they still appear in the Computer Group on the WSUS server. I could manually delete them from this group but there are dozens or hundreds to it'd be a lot of tedious work. The question is will this refresh in WSUS eventually and what is the time frame for that? Or will it have to be manual?
First, the scenario
Have the following OUs
* domain.local\Workstations\Staff_Desktops
* domain.local\Workstations\Staff_Laptops
* domain.local\Decommissioned (a temp place for disabled computers before deleting after X months)
GPO for Windows Update is applied to the domain.local\Workstations OU (so it is inherited by Desktops & Laptops) but the Decommissioned OU does not get this GPO.
The GPO points the computers to a Computer Group called 'Staff Workstations' and works fine. All computers update from WSUS.
And the issue...
Over time old computers have been turned off but not moved to the Decommissioned OU and still appear in WSUS saying they haven't contacted the server in a long time. I've now moved these computers to the Decommissioned OU (they won't receive the GPO because they're not turned on) but they still appear in the Computer Group on the WSUS server. I could manually delete them from this group but there are dozens or hundreds to it'd be a lot of tedious work. The question is will this refresh in WSUS eventually and what is the time frame for that? Or will it have to be manual?
