Group policy not updating xp client
Terminology: In this post i will use the term “client” many times.When I make this reference note that I am talking about any client of the WSUS Server, which could mean a “client” is either a server or workstation.The Workstation prefix is required as you might also want to patch Servers in the same site and therefore due to the unique target group requirement you will need to have a “Workstations Sydney” and “Servers Sydney” group.Now also take a look at the “Keep the GPO’s name consistent with the OU names” section in my Best Practice: Group Policy Design Guidelines – Part 2 post you can see how the WSUS Target Groups are also very consistent (but not the same) as the OU’s that the computer are located.I am also going to assume that you are familiar with WSUS and already have it deployed in your organisation…Having implement WSUS for an environment of over a combination of 10,000 servers and workstations I can truly say that this tool scales really well.One of the first things you should do once you have installed WSUS and performed the first sync is enabled the Group Policy computer group assignment.This allows the clients that connect to your WSUS server to be automatically configured in the correct targeting group when they connect to the WSUS server.
In conjunction with this setting I would also recommend that you set the “Configure Automatic Updates” to option 2 so that by default you are NOT inadvertently pushing out any patches to any computers.WSUS is also a requirement for the Software Update option in SCCM 2007.What I hope this post will teach you is how to use Group Policy in your environment to milk the absolute most out of your existing WSUS infrastructure.However there are a couple of reason why I think SCCM should still be used over WSUS and they are: Below are a collecting of configuration recommendations and tips that help you get the most our of your WSUS infrastructure in your environment.
These are in no particular order of importance and you might chose to implement only some of these setting depending on your environment.
Here I will tell you to go visit my Best Practice: Active Directory Structure Guidelines – Part 1 post where I talk about the number of ways you can build your OS structure.