WSUS (no dc or ad), how to add computers to download updates?

scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTLbehind youMod Posts: 2,752 Mod
This is driving me crazy.  If a WSUS server is not a DC and no AD, how can I add computers for it to download the updates approved? OR how can I just download the updates to the WSUS server?
Never let your fear decide your fate....

Comments

  • iBrokeITiBrokeIT GICSP, GCIP, GXPN, GPEN, GWAPT, GCFE, GCIH, GSEC, CySA+, Sec+, eJPT Member Posts: 1,294 ■■■■■■■■■□
    Wsus can get the update directly from Microsoft or another upstream WSUS server.  Then point those computer at your WSUS server either via GPO or by setting the following registry commands: https://github.com/vFense/vFenseAgent-win/wiki/Registry-keys-for-configuring-Automatic-Updates-&-WSUS
    2019: GPEN | GCFE | GXPN | GICSP | CySA+ 
    2020: GCIP | GCIA | eCPPT | eWPT | eCTHP

    WGU BS IT-NA | SANS Grad Cert: PT&EH | SANS Grad Cert: ICS Security
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youMod Posts: 2,752 Mod
    I have a upstream server that this WSUS connects to. I will look at that link. Thanks.
    Never let your fear decide your fate....
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youMod Posts: 2,752 Mod
    Also, how would I do it via GPO (since there is no AD)? I have looked at the administrative templates and that is where I get 'lost'. Thanks...
    Never let your fear decide your fate....
  • LonerVampLonerVamp OSCP, GCFA, GWAPT, CISSP, OSWP, AWS SA-A, AWS Security, Sec+, Linux+, CCNA Cyber Ops, CCSK Member Posts: 502 ■■■■■■■□□□
    Things like this may help (searching for "WSUS non-domain computers")


    Essentially, if you can set it via GPO, you can also just set it manually locally instead.



    Security Engineer/Analyst/Geek, Red & Blue Teams
    OSCP, GCFA, GWAPT, CISSP, OSWP, AWS SA-A, AWS Security, Sec+, Linux+, CCNA Cyber Ops, CCSK
    2020 goals: AWS Security Specialty, maybe AWAE or SLAE, CISSP-ISSAP?
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youMod Posts: 2,752 Mod
    Thanks, I will look into that.
    Never let your fear decide your fate....
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youMod Posts: 2,752 Mod
    an update: FINALLY! Was able to get computers registered to WSUS.  What a pain in the arse!! LOL
    Never let your fear decide your fate....
  • shochanshochan Member Posts: 927 ■■■■■■□□□□
    Now it's time to upgrade to SCCM! LOL


    2020 Goal ~ Linux+
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youMod Posts: 2,752 Mod
    It was for a project at work. Specific to WSUS. LOL
    Never let your fear decide your fate....
Sign In or Register to comment.