configuring computer groups in WSUS

[eyeball]

hi all

i have WSUS setup on a win2k server with MSDE installed,

iv got a test computer and i have downloaded and approved all of the updates on the WSUS server so now im ready to try to get the test pc to update itself from the WSUS server

if i open the wsus admin thing and select computers and create a new group called "test" for example that all works ok, but how do i add my test computer to this group? anyone know please?

thank you

Edited January 20, 2006 by eyeball

[jondercik]

Click the computers button up top.

[eyeball]

no you misunderstand me,

i have clicked "computers" from the top right and then clicked "create a computer group" from the top left.

i have then named the group wsustest, and i am having problems adding computers to this newly created group

also whats strange is that the all computers group cant see any computers...

Edited January 20, 2006 by eyeball

[Minus Human]

If i remember correctly the following should work.

You say you already have a group named WSusTest - Ok

go to your pc you want to add to this group and from the run command type:

gpedit.msc

when it opens browse to

Computer Configuration>

Administrative Templates>

Windows Components>

WindowsUpdate>

Then open the option client side targeting.

Select Enable and type WSUSTest in the space.

That Should do it

Minus Human

Ofcourse for multiple PC you would use a GPO to do this

Minus Human

[eyeball]

ah! it makes sense now

thankyou ill try that as soon as i get back to work on monday.

thank you

[eyeball]

i have now created a new OU and in it i put the test computer and a user.

i created a new GPO on it and have the following settings yet the computer fails to show up in the group on the wsus server:

group policy settings:

configure automatic updates - enabled - set to everyday auto install at 03:00

enable client side targeting - enabled - filled in the group name "testwsus"

automatica updates detection frequency - enabled - set to every hour

specify intranet microsoft update service location - enabled - set to http://wsusserver

also in the admin console of thewsus server in options i have selected client side targeting (through reg entry/ GPO)

even with all this set it still doesnt work, i would be very grateful to anyone who can offer help

thank you

[cluberti]

Take a look at this newsgroup post and see if anything sounds familiar:

http://groups.google.com/group/microsoft.p...2040319164e493e

[eyeball]

thanks

i sorted the problem yesterday but the forum was down so i couldnt post. below is a rough outline of how i set it up, if it helps anyone

btw these are my own personal notes but they should make sense, lol

how to install wsus on server 2000

* install w2k sp4 and ALL updates

*install msde2000A

during msde installation if you get an error that says "'A strong SA password is required for security reasons" then open a command window and type the following

"path to msde.exe" SAPWD=Admin DISABLENETWORKPROTOCOLS=0 SECURITYMODE=SQL

install .net 1.1

install .NET service pack 1

install bits 2.0 and http 5.1

restart the machine

install wsus

open the wsus console and click options, now click synchroize. let it finish this, which will take a while as it is downloading the updates.

once that has done click on updates and the select the updates you want to approve you can select multiple updates with shift

create your GPO and specify the follwing as the update service location http://wsusservername:8530

under client side targeting set this as the computer group name from within WSUS Admin console

you can also set the other options in the GPO

open IIS on the wsus server and allow anonymous access to the defalt + the admin site (properties -> security)

if this still doesnt work install bits 2.0 and http 5.1 (comes as a package) on the client machine and it should work

thanks for the help on this one guys