2003 server - Thursday, February 28, 2008 3:10 - 0 Comments

Deploy WSUS Updates to a Workgroup

In some instances you may need to deploy updates with WSUS to a workgroup that is not a part of your domain. This can be done with a quick registry edit.

WSUS and SUS are great ways of managing the deployment of operating system updates. This is a technology that a lot of the time is only available to domain users, but why should they get all of the fun? Even in some small workgroup environments there are benefits to being able to automatically handle updates.

In order to do this, create a text file with a .reg extension and put the following in it:

[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdate]
“WUServer”=”yoursusserver”
“WUStatusServer”=”yoursusserver”
“ElevateNonAdmins”=dword:00000001
“TargetGroupEnabled”=dword:00000001
“TargetGroup”=”Workstations”

[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU]
“NoAUShutdownOption”=dword:00000000
“AutoInstallMinorUpdates”=dword:00000001
“NoAUAsDefaultShutdownOption”=dword:00000001
“NoAutoRebootWithLoggedOnUsers”=dword:00000001
“RescheduleWaitTimeEnabled”=dword:00000001
“RescheduleWaitTime”=dword:00000001
“UseWUServer”=dword:00000001
“NoAutoUpdate”=dword:00000000
“AUOptions”=dword:00000004
“ScheduledInstallDay”=dword:00000000
“ScheduledInstallTime”=dword:00000010
“DetectionFrequencyEnabled”=dword:00000001
“DetectionFrequency”=dword:00000016
“RebootWarningTimeoutEnabled”=dword:00000001
“RebootWarningTimeout”=dword:00000005
“RebootRelaunchTimeoutEnabled”=dword:00000001
“RebootRelaunchTimeout”=dword:0000000a

Once you have done this, simply run this .reg file on each target computer in your workgroup and they should begin getting updates from your WSUS or SUS server.

Article written by MyComputerAid.com