So how does one get security and software updates out to remote users? My school has three criteria that set this problem into motion: our teachers all have laptops, they're allowed to take said laptops home, and we're on a 9 month calendar year. So, for the staff that elect take their laptops home that means they're offsite for almost three months. That is a long time to go with no security updates...

Beginning to look at ways of solving this problem I saw that some admins had come up with scripts that detect whether or not the system is on the domain network, and if not it would revert Windows Update to look to Microsoft rather than the internal WSUS server. This would work for most, but I just don't use WSUS for delivering Windows security updates - I also use it to update Chrome, Flash, Adobe Reader and a few others using WSUS Package Publisher/ (auto update for said software is disabled in base image). The ability for remote users then to reach the internal WSUS server is pretty much a necessity then at this point unless I wanted to change my process (which I didn't).

Before setting this there needs to be some prerequisites:

• Your internal domain name doesn't have a made up TLD like .local or .corp
  
• You own your domain name on the outside
  
• You have a certificate authority
  
• A functioning WSUS install
  

The above isn't absolute and there are ways around them, but this is how I set it up on my network. And since this is going to be exposed on the outside, you need to do move forward with security in mind. We will be enabling SSL and locking down some sections of WSUS.