Hi,
>>I am wondering if the WSUS has to be in the same virtual machine of the AD
No, it is not recommended to install the WSUS in a domain controller.
>>When I Install the WSUS and create the GPO don't get the computers from the domain
Actually, WSUS server won't "look for" the WSUS client. GPO is used to inform the client of the WSUS server's location. The the client will try to contact with the WSUS server.
To check if the GPO is applied to the client properly, please run the command on the client:
- gpupdate /force
- gpresult /h C:\report.html
Note: This procedure needs the privilege of the Administrator.
Here is a screenshot of my lab server:
Also, if the group policy is applied properly, the corresponding registry will be set:
Note:
- On WSUS 3.2 and earlier, port 80 for HTTP and 443 for HTTPS
- On WSUS 6.2 and later (at least Windows Server 2012), port 8530 for HTTP and 8531 for HTTPS
Best Regards.