Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Opinion on Using GPO to Point servers at different WSUS servers

In my active directory environment I have an OU "Members Servers" that have servers in two different physical locations (ie, two different towns).

At each of these sites I have a WSUS server and plan to roll out the EP two.

What would be the best way to have the servers in 1 location point to it's local WSUS server and the other location to it's local.

If I just use a GPO and link it to the OU, I can only specify 1 WSUS server. If I link a GPO to the AD Site that will also point the Workstations to the WSUS server which I do not want to do. We have a WSUS server for workstations and 1 for servers.

Thanks for your help.

Find more posts tagged with

Accepted answers

All comments

solarwinds-admin

Hi,

there are several ways you could accomplish this. One way would be to use the EP's ability to set Windows Update Local Policy. This would give you very granular control over groups of machines based on whatever critieria works best for you. You can specify which machines to apply the specific policy to by using Computer Rules in the task options wizard. This will allow you to for example, select all machines in a OU that are servers.

You could also create a site level linked GP and include a filter that excludes workstations, etc.

solarwinds-admin

Hi,

Thanks for the input, I think I might have figured it out.

By Creating a gpo and link to the site I can then create a WMI filter that will query the DomainRole in the Win32_ComputerSystem class and match to either the value of 3, 4 or 5 it's a member server or domain controller and will apply those settings.

solarwinds-admin

Hmm after thinking about what I said before for a bit, I thought that to implement that there are going to be a lot of GPO's for all the sites. Might not want to that.

solarwinds-admin

Create two GPOs each pointing to a local WSUS server. Link both to the OU. Create two groups, each composed of servers from a specific location and use security filtering to ensure the groups pick up the correct GPO.