WSUS (no dc or ad), how to add computers to download updates?
scaredoftests
Mod Posts: 2,780 Mod
This is driving me crazy. If a WSUS server is not a DC and no AD, how can I add computers for it to download the updates approved? OR how can I just download the updates to the WSUS server?
Never let your fear decide your fate....
Comments
-
iBrokeIT Member Posts: 1,318 ■■■■■■■■■□Wsus can get the update directly from Microsoft or another upstream WSUS server. Then point those computer at your WSUS server either via GPO or by setting the following registry commands: https://github.com/vFense/vFenseAgent-win/wiki/Registry-keys-for-configuring-Automatic-Updates-&-WSUS2019: GPEN | GCFE | GXPN | GICSP | CySA+
2020: GCIP | GCIA
2021: GRID | GDSA | Pentest+
2022: GMON | GDAT
2023: GREM | GSE | GCFA
WGU BS IT-NA | SANS Grad Cert: PT&EH | SANS Grad Cert: ICS Security | SANS Grad Cert: Cyber Defense Ops | SANS Grad Cert: Incident Response -
scaredoftests Mod Posts: 2,780 ModI have a upstream server that this WSUS connects to. I will look at that link. Thanks.Never let your fear decide your fate....
-
scaredoftests Mod Posts: 2,780 ModAlso, how would I do it via GPO (since there is no AD)? I have looked at the administrative templates and that is where I get 'lost'. Thanks...Never let your fear decide your fate....
-
LonerVamp Member Posts: 518 ■■■■■■■■□□Things like this may help (searching for "WSUS non-domain computers")https://community.spiceworks.com/topic/128245-updating-computers-using-wsus-without-joining-a-domainEssentially, if you can set it via GPO, you can also just set it manually locally instead.
Security Engineer/Analyst/Geek, Red & Blue Teams
OSCP, GCFA, GWAPT, CISSP, OSWP, AWS SA-A, AWS Security, Sec+, Linux+, CCNA Cyber Ops, CCSK
2021 goals: maybe AWAE or SLAE, bunch o' courses and red team labs? -
scaredoftests Mod Posts: 2,780 ModThanks, I will look into that.Never let your fear decide your fate....
-
scaredoftests Mod Posts: 2,780 Modan update: FINALLY! Was able to get computers registered to WSUS. What a pain in the arse!! LOL
Never let your fear decide your fate.... -
shochan Member Posts: 1,014 ■■■■■■■■□□Now it's time to upgrade to SCCM! LOLCompTIA A+, Network+, i-Net+, MCP 70-210, CNA v5, Server+, Security+, Cloud+, CySA+, ISC² CC, ISC² SSCP
-
scaredoftests Mod Posts: 2,780 ModIt was for a project at work. Specific to WSUS. LOL
Never let your fear decide your fate....