+ Post New Thread
Results 1 to 7 of 7
Windows Thread, Differing policies for WSUS : laptops v fixed PC's in Technical; We use an internal WSUS server to push out updates to all our clients. I have a GPO which sets: ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    31

    Differing policies for WSUS : laptops v fixed PC's

    We use an internal WSUS server to push out updates to all our clients.

    I have a GPO which sets:

    Automatic Updates detection frequency Enabled
    Check for updates at the following
    interval (hours): 6

    Configure Automatic Updates Enabled
    Configure automatic updating: 4 - Auto download and schedule the install
    The following settings are only required
    and applicable if 4 is selected.
    Scheduled install day: 0 - Every day
    Scheduled install time: 03:00


    Enable client-side targeting Enabled
    Target group name for this computer : Machines


    No auto-restart with logged on users for scheduled automatic updates installations Enabled
    Specify intranet Microsoft update service location Enabled
    Set the intranet update service for detecting updates: http://wsus:8530
    Set the intranet statistics server: http://wsus:8530


    I want the wireless laptops used around school to NOT auto download updates or install them.
    What would I need to change in the above?

    I've already created a new group on the WSUS called "wlaptops"

    I've copied the existing policy and made this change:
    Enable client-side targeting Enabled
    Target group name for this computer : wlaptops (instead of Machines)

    Is the only other change reqired to change option 4 to option 2:
    2 = Notify before downloading any updates and notify again before installing them.

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Just disable the following on your new GPO then link it.

    - Configure Automatic Updates

    - Specify intranet Microsoft update service location

  3. #3
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    31
    Won't the laptops then try and update via the internet?

    Thanks.

  4. #4


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,592
    Thank Post
    228
    Thanked 856 Times in 735 Posts
    Rep Power
    296
    Quote Originally Posted by kennysarmy View Post
    Won't the laptops then try and update via the internet?

    Thanks.
    you could always use a gpo and point them at a non existant server

  5. #5

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    11,941
    Thank Post
    1,628
    Thanked 1,898 Times in 1,410 Posts
    Blog Entries
    2
    Rep Power
    429
    In theory they shouldn't if the GPO is in place. Plus on each laptop you can turn off auto updates. When you set the GPO's, wire them in via cat5e/cat6 and then force update the policies. Should start taking WSUS updates there and then, and each time after by wireless.

  6. #6

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Quote Originally Posted by kennysarmy View Post
    Won't the laptops then try and update via the internet?

    Thanks.
    No they shouldn't update at all. Alternatively as mentioned above, you could just specify duff server information so Automatic Updates is still enabled, but won't ever download anything.

  7. #7
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    31
    Thanks ALL

SHARE:
+ Post New Thread

Similar Threads

  1. Policy for students' own laptops on network
    By Craggus2000 in forum School ICT Policies
    Replies: 1
    Last Post: 26th November 2009, 09:16 AM
  2. Joypad for a Laptop/PC
    By Chuckster in forum Hardware
    Replies: 8
    Last Post: 1st October 2009, 03:40 PM
  3. Policy For Laptops - advice needed please.
    By mattx in forum How do you do....it?
    Replies: 9
    Last Post: 9th September 2009, 07:58 PM
  4. Laptop Trolley. Policy for usage?
    By reggiep in forum Hardware
    Replies: 3
    Last Post: 2nd June 2008, 09:32 AM
  5. What is your school policy for pupils who access porn?
    By woody in forum School ICT Policies
    Replies: 24
    Last Post: 8th November 2005, 10:47 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •