There isn't even a need for a separate OU - you can just use security group filtering...
Cheers Ken -----Original Message----- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Friday, 6 August 2010 2:32 AM To: NT System Admin Issues Subject: Re: WSUS tools? That seems overly complex - perhaps that's because I'm not familiar with the technique. I'll look into that, however. On Wed, Aug 4, 2010 at 18:39, Richard Stovall <rich...@gmail.com> wrote: > I must be missing something about the second. Why not put the > machines in a special OU (or OUs) and set the GPO for that particular > OU to install at 6PM on Wednesday. Modify as necessary. Control the > updates applied via groups in WSUS, control the actual installation of those > updates via GPO. > But like I said, I must be missing something. Constrained by computer > object and OU placement in AD, perhaps? > > On Wed, Aug 4, 2010 at 5:33 PM, Kurt Buff <kurt.b...@gmail.com> wrote: >> >> I've got to clean up our WSUS installation after the departure of a >> minion, and I'm trying to find find some tools to help with the task. >> >> Here's a couple of wishes: >> >> 1) Ability to clean out superseded updates - decline them, or >> whatever, so I only see what's current >> >> 2) Ability to prep updates for a target group and set them to go >> at a future date/time. >> For instance, I might have to leave on Tuesday for a couple >> of days, and want to prepare my >> test group to receive the latest set on Wednesday after 6pm. >> >> It looks like WSUSter (http://www.wsus.nl/site/content/view/23/38/) >> would be useful for (1) but haven't implemented it yet - do any of >> you have experience with it and like it? Any alternatives that you like? >> >> I haven't found *anything* for (2) yet, and am hoping someone has >> found something to satisfy that desire. >> >> Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
