WSUS (no dc or ad), how to add computers to download updates?

scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTLbehind youPosts: 2,715Mod Mod
This is driving me crazy.  If a WSUS server is not a DC and no AD, how can I add computers for it to download the updates approved? OR how can I just download the updates to the WSUS server?
Never let your fear decide your fate....

Comments

  • iBrokeITiBrokeIT GXPN GPEN GWAPT GCIH GCFE GICSP GSEC eJPT Sec+ Posts: 1,260Member ■■■■■■■■■□
    Wsus can get the update directly from Microsoft or another upstream WSUS server.  Then point those computer at your WSUS server either via GPO or by setting the following registry commands: https://github.com/vFense/vFenseAgent-win/wiki/Registry-keys-for-configuring-Automatic-Updates-&-WSUS
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youPosts: 2,715Mod Mod
    I have a upstream server that this WSUS connects to. I will look at that link. Thanks.
    Never let your fear decide your fate....
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youPosts: 2,715Mod Mod
    Also, how would I do it via GPO (since there is no AD)? I have looked at the administrative templates and that is where I get 'lost'. Thanks...
    Never let your fear decide your fate....
  • LonerVampLonerVamp OSCP, GCFA, GWAPT, CISSP, OSWP, CCNA Cyber Ops, Sec+, Linux+, AWS CCP, CCSK Posts: 392Member ■■■■■□□□□□
    Things like this may help (searching for "WSUS non-domain computers")


    Essentially, if you can set it via GPO, you can also just set it manually locally instead.



    Security Engineer/Analyst/Geek, Red & Blue Teams
    OSCP, GCFA, GWAPT, CISSP, OSWP, CCNA Cyber Ops, Sec+, Linux+, AWS CCP, CCSK
    2019 goals: GWAPT, Linux+, (possible: SLAE, CCSK, AWS SA-A)
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youPosts: 2,715Mod Mod
    Thanks, I will look into that.
    Never let your fear decide your fate....
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youPosts: 2,715Mod Mod
    an update: FINALLY! Was able to get computers registered to WSUS.  What a pain in the arse!! LOL
    Never let your fear decide your fate....
  • shochanshochan Senior Member Posts: 870Member ■■■■■■□□□□
    Now it's time to upgrade to SCCM! LOL



    "It's not good when it's done, it's done when it's good" ~ Danny Carey
  • scaredoftestsscaredoftests Security +, ITIL Foundation, MPT, EPO, ACAS, HTL behind youPosts: 2,715Mod Mod
    It was for a project at work. Specific to WSUS. LOL
    Never let your fear decide your fate....
Sign In or Register to comment.