Greetings,

  First time setting up WSUS on Server 2012 R2. Configured it to download what I wanted. Set up the auto approve.

  Set up a group policy targeted to the whole domain.

  New machines installed into the domain and nothing happens.

  What's missing? Some articles Ive seen talk about running wuauctl /detectnow on every machine. That sounds ridiculous -  cant I just configure something in group policy so that the client starts receiving updates?

   How can I automate this so that when any new machine joins the domain, it picks up the group policy and eventually gets all he updates from WSUS without touching the clients?

Thanks

David Z

Are you pre-staging the computer object or are they just going to DomainName-->Computers ?

The computers object isnt an OU but a container and GPOs do not apply to machines in here. i.e. have you moved the computers from the default Computers container?

How can I automate this so that when any new machine joins the domain, it picks up the group policy and eventually gets all he updates from WSUS without touching the clients?

That is how WSUS is supposed to work.

Set up a group policy targeted to the whole domain - I hope you have defined the WSUS GPO settings correctly. Are the policies updated on client machines ?. You could check that by running rsop.msc command.

Here are the few step by step posts on WSUS. I hope it will help you.

http://prajwaldesai.com/installation-of-wsus-3-0-sp2/

http://prajwaldesai.com/configuring-wsus-3-0-sp2-on-windows-server/

http://prajwaldesai.com/managing-wsus-3-0-sp2-on-windows-server/

http://prajwaldesai.com/troubleshooting-wsus-3-0-sp2-on-windows-server/

http://prajwaldesai.com/how-to-configure-client-side-targeting-in-wsus/

Thanks,

Prajwal Desai

Are you pre-staging the computer object or are they just going to DomainName-->Computers ?

The computers object isnt an OU but a container and GPOs do not apply to machines in here. i.e. have you moved the computers from the default Computers cont

Thanks,

I did the installation diferently. Its much easier just installing the wsus role on server 2012 R2.

The link above to "configuring" doesnt work.

Cheers

David Z

Hi David,

First, make sure that the GPO has been applied to the computer properly. To check that, please follow the steps below:

• gpupdate /force
• gpresult /h C:\report.html

Note: This procedure needs the privilege of the Administrator.

If the GPO is applied correctly, the corresponding registry key will be set. Here is the screenshot of my lab:

Then just start checking updates on client. If you want to automate this process, just set the suitable group policy:

https://technet.microsoft.com/en-us/library/dn595129.aspx

Best Regards.