WSUS (no dc or ad), how to add computers to download updates?

scaredoftestsscaredoftests Mod Posts: 2,780 Mod
This is driving me crazy.  If a WSUS server is not a DC and no AD, how can I add computers for it to download the updates approved? OR how can I just download the updates to the WSUS server?
Never let your fear decide your fate....

Comments

  • iBrokeITiBrokeIT Member Posts: 1,318 ■■■■■■■■■□
    Wsus can get the update directly from Microsoft or another upstream WSUS server.  Then point those computer at your WSUS server either via GPO or by setting the following registry commands: https://github.com/vFense/vFenseAgent-win/wiki/Registry-keys-for-configuring-Automatic-Updates-&-WSUS
    2019: GPEN | GCFE | GXPN | GICSP | CySA+ 
    2020: GCIP | GCIA 
    2021: GRID | GDSA | Pentest+ 
    2022: GMON | GDAT
    2023: GREM  | GSE | GCFA

    WGU BS IT-NA | SANS Grad Cert: PT&EH | SANS Grad Cert: ICS Security | SANS Grad Cert: Cyber Defense Ops SANS Grad Cert: Incident Response
  • scaredoftestsscaredoftests Mod Posts: 2,780 Mod
    I have a upstream server that this WSUS connects to. I will look at that link. Thanks.
    Never let your fear decide your fate....
  • scaredoftestsscaredoftests Mod Posts: 2,780 Mod
    Also, how would I do it via GPO (since there is no AD)? I have looked at the administrative templates and that is where I get 'lost'. Thanks...
    Never let your fear decide your fate....
  • LonerVampLonerVamp Member Posts: 518 ■■■■■■■■□□
    Things like this may help (searching for "WSUS non-domain computers")


    Essentially, if you can set it via GPO, you can also just set it manually locally instead.



    Security Engineer/Analyst/Geek, Red & Blue Teams
    OSCP, GCFA, GWAPT, CISSP, OSWP, AWS SA-A, AWS Security, Sec+, Linux+, CCNA Cyber Ops, CCSK
    2021 goals: maybe AWAE or SLAE, bunch o' courses and red team labs?
  • scaredoftestsscaredoftests Mod Posts: 2,780 Mod
    Thanks, I will look into that.
    Never let your fear decide your fate....
  • scaredoftestsscaredoftests Mod Posts: 2,780 Mod
    an update: FINALLY! Was able to get computers registered to WSUS.  What a pain in the arse!! LOL
    Never let your fear decide your fate....
  • shochanshochan Member Posts: 1,004 ■■■■■■■■□□
    Now it's time to upgrade to SCCM! LOL
    CompTIA A+, Network+, i-Net+, MCP 70-210, CNA v5, Server+, Security+, Cloud+, CySA+, ISC² CC, ISC² SSCP
  • scaredoftestsscaredoftests Mod Posts: 2,780 Mod
    It was for a project at work. Specific to WSUS. LOL
    Never let your fear decide your fate....
Sign In or Register to comment.