WSUS - Computer Target Groups

[db2995]

Hello Folks,

 

I'm currently in the process of working towards creating a new installation of Windows 7 with a lot more refinement than now from both computer / user side.

 

I'm in the process of creating a test base image on a workstation for part of the project above and although I do have some experience with WSUS, I'm unsure of the following.

 

If a 'new' target computer group is created to place the test workstation in as specified by a .REG file (not permanently, just don't want any aforementioned updates being mixed with live workstations plus the reference machine is not on our domain), will the target computer group inherit whether or not updates have been approved or declined as for the main target computer group?

 

Cheers

Davey

Edited January 31, 2017 by db2995

[computer_expert]

Say you have 2 target groups: Windows 7 - Production and Windows 7 - Testing. Any updates approved for the Production target group will not apply to the Testing group unless you approve them for the testing group (watch out for any WSUS auto approval rules too). This will also mean that any new target groups will start out with no approved updates.

 

If the testing machine is going to be sysprepped for deployment, you'll need to remove the following registry entries otherwise all machines will have the same WSUS client ID:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate

 

Delete the following entries:

 

PingID
AccountDomainSid
SusClientId
SusClientIDValidation

 

then sysprep/capture the image.