Similar here ... Except we set up separate WSUS VM's for workstations and Servers.
On the workstation VM we setup target groups based on our administrative divisions. For example all the HR workstations go into a "HR workstation" group and all the Financial workstations go into a "Financials workstations" group... Etc. We don't divide workstations out by type or OS in WSUS only by admin division. We have about 800 workstations pointed at that WSUS server divided out to 12 computer groups. It would be a nice enhancement to WSUS that it would actually read AD computer groups instead of yet again setting up a new group scheme. One would think that a MS patching system would know how to use Active Directory. Of course, when I talked to a WSUS dev person at TechED two years ago and asked about why do they limit the install/reboot time setting in WSUS/SUS to integer hours instead of allowing Admins to use minutes (e.g. 7:30 or 7:15 or 5:15), he looked at me like I was from Mars. So if the WSUS devs can't figure out that time also comes in minutes instead of just hours maybe they also don't know that Active Directory computer groups exist. :-) _Stuart Fuller -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Thursday, May 11, 2006 3:22 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: WSUS groupings match your AD groupings? I tried the gp targeted thing and didn't like it. I just create groups by purpose, color, whatever and move stuff around. Mostly just have things sorted out by purpose. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of Scott Klassen > Sent: Thursday, May 11, 2006 4:52 PM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] OT: WSUS groupings match your AD groupings? > > I'm setup with 3 groups here. Workstations, Servers, and Laptops. > Mid-sized. > > Scott Klassen > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, > CPA aka Ebitz - SBS Rocks [MVP] > Sent: Thursday, May 11, 2006 2:36 PM > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] OT: WSUS groupings match your AD groupings? > > I was just chatting with someone on what a typical firm sets up in > their Target groups in WSUS > > SBS 2003 r2 will ship with 2 servers and computers Some of us have > three.. servers, computer, laptops. > > For mid sized firms.... what's your average number of groups that is > reasonable for you to handle? > > For large firms.. what's your average number of groups? > > And does your WSUS groupings match your AD/OU groupings? > > Just wondering how you guys in big server land are setting up WSUS. > (or are you using other patch products.. I use Shavlik here) > > -- > Letting your vendors set your risk analysis these days? > http://www.threatcode.com > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail- > archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail- > archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
