Differing policies for WSUS : laptops v fixed PC's

[kennysarmy]

We use an internal WSUS server to push out updates to all our clients.

 

I have a GPO which sets:

 

Automatic Updates detection frequency Enabled

Check for updates at the following

interval (hours): 6

 

Configure Automatic Updates Enabled

Configure automatic updating: 4 - Auto download and schedule the install

The following settings are only required

and applicable if 4 is selected.

Scheduled install day: 0 - Every day

Scheduled install time: 03:00

 

 

Enable client-side targeting Enabled

Target group name for this computer : Machines

 

 

No auto-restart with logged on users for scheduled automatic updates installations Enabled

Specify intranet Microsoft update service location Enabled

Set the intranet update service for detecting updates: http://wsus:8530

Set the intranet statistics server: http://wsus:8530

 

 

I want the wireless laptops used around school to NOT auto download updates or install them.

What would I need to change in the above?

 

I've already created a new group on the WSUS called "wlaptops"

 

I've copied the existing policy and made this change:

Enable client-side targeting Enabled

Target group name for this computer : wlaptops (instead of Machines)

 

Is the only other change reqired to change option 4 to option 2:

2 = Notify before downloading any updates and notify again before installing them.

[Michael]

Just disable the following on your new GPO then link it.

 

- Configure Automatic Updates

 

- Specify intranet Microsoft update service location

[kennysarmy]

Won't the laptops then try and update via the internet?

 

Thanks.

[sted]

Won't the laptops then try and update via the internet?

 

Thanks.

 

you could always use a gpo and point them at a non existant server

[featured_spectre]

In theory they shouldn't if the GPO is in place. Plus on each laptop you can turn off auto updates. When you set the GPO's, wire them in via cat5e/cat6 and then force update the policies. Should start taking WSUS updates there and then, and each time after by wireless.

[Michael]

Won't the laptops then try and update via the internet?

 

Thanks.

 

No they shouldn't update at all. Alternatively as mentioned above, you could just specify duff server information so Automatic Updates is still enabled, but won't ever download anything.

[kennysarmy]

Thanks ALL