Fancy footwork needed with WSUS

Fancy footwork needed with WSUS
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Fancy footwork needed with WSUS Spin 07-14-2006
Posted by Spin on July 14, 2006, 9:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Gurus,

I am a system administrator in charge of too many Windows Server systems. I
do not have time to figure out which servers need what patches and install
them. I do have development groups underneath me. I want to delegate in
Group Policy the ability for these groups to pick which patches get sent to
their little group of servers and then these patches will automatically
download and install (and reboot) the servers.

Is there anyway I can do this kind of fancy footwork with WSUS?

--
Spin



Posted by Michael D. Ober on July 14, 2006, 9:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Install WSUS on their servers and slave them to your WSUS server. Then in
AD Users and Computers, create OUs for each WSUS server group and set the
group policy to point to their WSUS server for updates. Doing this will
allow you to control the overall patch environment with your development
groups getting to select the subset of overall approved patches they want at
any given time.

Mike Ober.

> Gurus,
>
> I am a system administrator in charge of too many Windows Server systems.
I
> do not have time to figure out which servers need what patches and install
> them. I do have development groups underneath me. I want to delegate in
> Group Policy the ability for these groups to pick which patches get sent
to
> their little group of servers and then these patches will automatically
> download and install (and reboot) the servers.
>
> Is there anyway I can do this kind of fancy footwork with WSUS?
>
> --
> Spin
>
>



Posted by Roger Abell [MVP] on July 15, 2006, 4:37 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Alternatively, WSUS has an API and some sample code, which could enable
a dev to make a Asp.Net interface where the interface controls what computer
group can by affected by which user when the interface is used to select
patches
to be set for install.
I have to wonder however why you would not want to make sure all servers
are brought up to snuff, with some perhaps exempted from being WSUS
clients while/if a specific patch has been found to break what they are
developing (while they figure how to fix their code that is).

> Gurus,
>
> I am a system administrator in charge of too many Windows Server systems.
> I do not have time to figure out which servers need what patches and
> install them. I do have development groups underneath me. I want to
> delegate in Group Policy the ability for these groups to pick which
> patches get sent to their little group of servers and then these patches
> will automatically download and install (and reboot) the servers.
>
> Is there anyway I can do this kind of fancy footwork with WSUS?
>
> --
> Spin
>
>



Similar ThreadsPosted
WSUS January 4, 2006, 1:16 pm
wsus February 28, 2006, 8:41 am
Help needed April 24, 2006, 4:16 pm
WSUS ports November 30, 2005, 9:35 am
WSUS Newsgroups April 12, 2006, 10:37 am
Clarification in WSUS December 29, 2007, 8:42 am
WSUS - how starting February 16, 2008, 4:26 pm
Urgent help needed! May 1, 2006, 4:26 am
EFS Certificate Needed October 23, 2007, 3:12 am
Force reboot in WSUS September 22, 2005, 3:55 pm

The site map in XML format XML site map

Contact Us | Privacy Policy