WSUS - group policy - mutiple downstream servers

Question

I am interested in getting a WSUS server set up for my organization. My organization is spread out over an entire state so I probably need to have a couple downstream servers that point to the upstream server. What is the best way to handle multiple downstream servers within Group Policy? Would OU's based off region be the route to go so that clients point to the nearest server?

Answer 1

The simpliest mode is by configuring GPO to target the site the user is in currently. As we know user can move, so that way the server the user will use will be always the nearest for him.

At your head office you use a WSUS server for downloading the patch and approval, and in other site, where needed, you use WSUS server in replica mode.

To have that work in Active Directory and Site make sure all your site are configured. After that you link the correct server by site. See there for an example

Answer 2

Hi there,

WSUS should run on a dedicated server, meaning the server will not run any other applications except IIS, which is required.

After you install the Windows Server Update Services (WSUS) server role on your server, you need to properly configure it. You also need to configure your client computers to receive their updates from the WSUS server.

This article walks you through the following procedures: Configure WSUS https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/2-configure-wsus

-------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 3

Hi @steck35 ,

As per my experience, there might not be the suitable method that clients point to the nearest server autmatically in WSUS, unless we could change the GPO automatically.

It is recommended that we use SCCM to realize it. It could use boundary group to automatic site assignment, here is the related article, just for reference:
https://learn.microsoft.com/en-us/mem/configmgr/core/servers/deploy/configure/boundary-groups

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.