Configure Computer Groups

Update Services automatically configures client computers and additional servers that are joined to the Windows SBS 2003 R2 domain so that they download updates from the computer on the network that is running Windows SBS 2003 R2 and not from the Microsoft Update servers.

When Update Services is first installed, Group Policy objects (GPOs) are created and linked at the domain level. When client computers and additional servers in the domain refresh their Group Policy settings, these GPOs are applied.

noteNote
If you already have Windows Server Update Services (WSUS) 2.0 running when you install the Windows SBS 2003 R2 Technologies, and you have created custom GPOs to work with WSUS 2.0, you should delete your custom GPOs so that they do not conflict with the GPOs that Update Services creates. For more information, see Troubleshooting.
noteNote
The default cycle to refresh Group Policy settings on computers running Windows is 90 minutes. You can also refresh Group Policy settings on network computers immediately in either of the following ways:
  • Log off the computer and then log back on.
  • Use gpupdate /force at the command prompt on the computer. For more information, see Troubleshooting.

Update Services keeps track of which computers are registered with it, and it periodically compares this list with Active Directory. Computers that are listed in Active Directory but that are not registered with Update Services are displayed in a warning message in the Update Services home page status area.

noteNote
When Update Services is first installed, the list of computers that are in Active Directory but that are not registered with Update Services may include every computer in the Windows SBS 2003 R2 domain. This is because Update Services obtains the list of computers that are in Active Directory faster than computers in the domain can register with Update Services. Because client computers in the domain refresh their Group Policy settings every 90 minutes, they may not register with Update Services until some time after Update Services obtains the list of computers that are in Active Directory. To receive an accurate list of computers that are not registered with Update Services, you should either wait a few hours after installing Update Services or you should immediately refresh the Group Policy settings on the client computers by using the methods listed in the preceding Note.

Computer Groups

To ease administration of updates for computers that are joined to the Windows SBS 2003 R2 domain, Update Services classifies network computers into two groups: Server Computers and Client Computers. Using groups provides Windows SBS administrators the ability to manage updates for computers on the network differently, based on the role or usage of the computers.

 

Computer Group Definition

Update Services Server Computers group

  • A computer is classified as a server computer if it is running Windows 2000 Server or later.
  • The computer that is running Windows SBS 2003 R2 is placed in the Server Computers group by default. Update Services settings for the Server Computers group also apply to the computer that is running Windows SBS 2003 R2.

Update Services Client Computers group

  • A computer is classified as a client computer if it is running one of the following operating systems:
    • Windows 2000 Professional
    • Windows XP Professional
    noteNote
    All computers must be running a version of Automatic Updates that is compatible with Update Services. Most versions of Automatic Updates automatically self-update to the compatible version when they first connect to Update Services. But the version of Automatic Updates that is included with Windows XP without any service packs cannot automatically self-update. This is also true of Windows 2000 without Service Pack 3 or higher installed. If you have computers on your network running Windows XP without any service packs or Windows 2000 without Service Pack 3 or higher, you should install the latest service packs, which include the version of Automatic Updates that is compatible with Update Services. If you cannot do this, see “Deploying Microsoft Windows Server Update Services” at the Microsoft Web site (http://go.microsoft.com/fwlink/?linkid=41171) for other options.

In some cases, you may want to move a computer from one computer group to another, or you may want to exclude a computer from Update Services management altogether. For either task, use the Update Services Settings dialog.

noteNote
If you change the computer group membership of a network computer, (for example, if you move a network computer from the Update Services Client Computers group to the Update Services Server Computers group), it takes 90 minutes for this change to apply. This is because network computers refresh their Group Policy settings every 90 minutes.

Complete the following procedure to move a computer from one computer group to another

To move a computer to a different computer group
  1. Click Start, and then click Server Management.

  2. In the console pane of the Server Management console, click Update Services.

  3. On the Update Services home page, click Change Update Services Settings. The Update Services Settings dialog appears.

  4. Click the Included Computers tab. In the list of included computers, click the computer name of the computer you want to move.

  5. Click the Modify button. The Change Update Group Membership dialog appears.

  6. Click the Update Group that you want move the computer to, and then click OK to close the Change Update Group Membership dialog.

  7. Click OK to close the Update Services Settings dialog.

Complete the following procedure to exclude a computer from Update Services management:

To exclude a computer from Update Services
  1. Click Start, and then click Server Management.

  2. In the console pane of the Server Management console, click Update Services.

  3. On the Update Services home page, click Change Update Services Settings. The Update Services Settings dialog appears.

  4. Click the Included Computers tab. In the list of included computers, click the computer name of the computer you want to exclude.

  5. Click the Remove button. The computer name appears in the Excluded column.

  6. Click OK to close the Update Services Settings dialog.

See Also

Community Additions

ADD
Show: