Adding Computers to WSUS 3.0 SP2 (Windows Server 2008)

This tutorial is going to cover how to add Computers to update services.

The WSUS Help is very very good and its your best friend! So don’t forget him Cool

Microsoft suggests to use Group Policy for setting up computers and WSUS in clients. So we set our WSUS details in our Group Policy Object (GPO).

1) Create a new GPO
[Do not edit the default Domain Controller Policy or Default Domain Policy]

2) Edit the newly created GPO
a) Go to Computer Configuration–>Windows Components–>Windows Update
b) On the Settings tab (right side)
–> Enable client-side targeting and specify the Computer Group that machines need to be added
–> Under Specify Intranet Microsoft Update Service location, enable it and give your WSUS
address
for both intranet update service and intranet statistics server

3) Specify the Security Filtering for this newly created GPO to the specific Computer or Groups or Users you want it to reflect

4) Link this newly created GPO in your Domain and make it Enforced

5) Restart (may or may not be required) the client machine to which you have set this GPO

6) Login to the client machine and now check the registry settings in the client machine. Below you have the location you want to check,

And check its values,

The TargetGroupWUServer and WUStatusServer should have the values you set in your GPO

So, being said that all are good, now check whether you have set Windows Update to Automatic mode, if not, set it and then Check For Updates. You may be prompted an update to the Windows Update, install it.

Now, go to your server, fire up WSUS Administration Console and go to,
Update Services–>Server–>Computers

Check whether you can actually see the Computer in which you have set up the Intranet Update Service. If you cannot see,wait for sometime (10 to 30 minutes!)

If you see your Computer, but then if it tells your that its status is not yet reported, then, run this on the client Computer (on the command prompt),

wuauclt /resetauthorization /detectnow

You should now be able to view your computer in the WSUS Administration Console

And finally here is my status of my Computer,

WSUS Status

So now, you can play with your WSUS and Windows Server 2008 

Source: Chaks’ Geekzone Corner


6 comments to this article

  1. Mike Murphy

    on November 1, 2010 at 17:41 -

    I am having a problem finding the Computer Config -> Policies -> Administrative Templates -> Windows Components -> Windows Updates
    When I go in to Admin Templates there is nothing there. Hope you can help. Thanks.

  2. wingman

    on November 2, 2010 at 20:00 -

    it should be “Computer Configuration–>Policies–>Windows Components–>Windows Update”.Let me know if it works

  3. praeeth

    on April 30, 2012 at 09:34 -

    There is no Computer Configurration -> policies xxx Wrong

    Computer Configuration -> Windows components -> Windows Updats

  4. wingman

    on April 30, 2012 at 18:47 -

    Thanks Praeeth. I have updated the relevant entry

  5. praeeth

    on May 2, 2012 at 06:48 -

    hmm great is it works !!!

  6. Admin_Randy

    on August 2, 2012 at 21:49 -

    Hey I followed all the instructions, ad I still have no computers, my WSUS is installed on a hyper-v system with Server 2008 R2, and my GPO and DC is Server 2003, and my internet is through ISA 2006. it has all the updates but no computers are being shown, if i type in the IIS server address in a browser the default IIS website comes up.

    Help!

Leave a Reply