This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 12%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESV%3C/text%3E%3C/svg%3E)
Hello,
I have several user's who will be taking their computer's in and out of our office. These machines are currently connected to the WSUS server.. When these machines go home with the user's and can no longer communicate with the WSUS server (different network), is there a way to have these machines pull updates from Windows automatically??
The machines could be on a different network (home networks), without being able to communicate with the WSUS server for several days if not weeks.
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 24%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Hi sebbyv-6983,
Thanks for your response.
I can't confirm that the AJTek method works. I think if you want the client to report the update status to WSUS, the client needs to be able to connect to WSUS first. For example, a client connects to WSUS via a VPN or other means.
Theoretically, if the client could connect to WSUS via a VPN or other means while working from home, the client could report the update status to WSUS. After the client installs the update, we can switch the network to the intranet. The client will report the update status to WSUS.
Regards,
Rita
Setup a 2nd WSUS server in your DMZ and use a single FQDN to manage WSUS.
https://www.ajtek.ca/wsus/externally-facing-wsus-servers/
Hi sebbyv-6983,
In my opinion, it is difficult for WSUS to achieve this function. Windows Update for business does help, but the process is complex. Or we could consider delaying the updates to the client. When these computers come back to the office, we may try to apply the latest CUs and SSUs for the clients.
Regards,
Rita
Before these computers are able to connect at the office, they need to be 100% patched and on the latest windows updates. Therefore I need to make sure these machines are always getting updates as soon as they are released.
I was thinking to possibly use WSUS for reporting only, but all the logic is handled on the wsus server. So the remote computers will still need to communicate with the WSUS server before they actually know which updates to get.
Rita, are you suggesting that what Adam has informed me about will not work good?
Thanks!