WSUS on SBS2008: updating remote clients

[kwinsw]

Hi,

I’m looking into setting up a VPN for my small business. We’re either going to use the VPN function built into SBS2008 or one of the Netgear security appliances, probably the FVS336G. One of the things I’m trying to figure out at the moment is how to make sure that the remote systems, which could be offsite for long periods, get the updates I want them to.

I can configure WSUS simply store remotely so that the clients get their list of approved patches from our WSUS server but actually download the updates from Microsoft Update: that’s no problem. What I’m trying to figure out is how to force the clients to regularly synchronize with the WSUS server.

If anyone can point me at a good source of information on how to do this, I’d be really grateful.

Thanks

kwinsw

 

[markdmac]

WSUS is specifically designed to not go past a firewall, so you won't be able to do this. I worked on a project for Microsoft to document some SBS Best Practices and we were trying to figure out how we (a MS Gold Certified Partner) could offer centralized patch management as a managed service for our customers. I was able to point different IIS WSUS sites to the same catalog and allow for tracking of multiple deny/approve lists, however the clients would not work past the firewall. MS confirmed for me that was the intended behavior so I doubt very highly you will be able to get this to work as you wish it to.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.