WSUS (no dc or ad), how to add computers to download updates?

This is driving me crazy. If a WSUS server is not a DC and no AD, how can I add computers for it to download the updates approved? OR how can I just download the updates to the WSUS server?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

iBrokeIT

Wsus can get the update directly from Microsoft or another upstream WSUS server. Then point those computer at your WSUS server either via GPO or by setting the following registry commands: https://github.com/vFense/vFenseAgent-win/wiki/Registry-keys-for-configuring-Automatic-Updates-&-WSUS

scaredoftests

I have a upstream server that this WSUS connects to. I will look at that link. Thanks.

scaredoftests

Also, how would I do it via GPO (since there is no AD)? I have looked at the administrative templates and that is where I get 'lost'. Thanks...

LonerVamp

Things like this may help (searching for "WSUS non-domain computers")

https://community.spiceworks.com/how_to/85392-wsus-targeting-for-non-domain-computers

https://community.spiceworks.com/topic/128245-updating-computers-using-wsus-without-joining-a-domain

Essentially, if you can set it via GPO, you can also just set it manually locally instead.

scaredoftests

Thanks, I will look into that.

scaredoftests

an update: FINALLY! Was able to get computers registered to WSUS. What a pain in the arse!! LOL

shochan

Now it's time to upgrade to SCCM! LOL

scaredoftests

It was for a project at work. Specific to WSUS. LOL