Guest paulreims@gmail.com Posted August 21, 2007 Posted August 21, 2007 Hello, I have installed WSUS 3 and configured the Computer Groups with the same name as the Organization Units in the Active Directory. For each OU in the Active Directory, there is a Computer Group in the WSUS. Now I want to do targeting with Group Policies. Do I have to create one Group Policy per OU or is there a possibility to tell the WSUS to use the same Computer Group name for each computer as the OU that it is located in in the Active Directory (variable in Group Policy property "Target Group Name for this Computer" or similar)? Thank you very much PR
Guest Harry Johnston Posted August 21, 2007 Posted August 21, 2007 paulreims@gmail.com wrote: > I have installed WSUS 3 and configured the Computer Groups with the > same name as the Organization Units in the Active Directory. For each > OU in the Active Directory, there is a Computer Group in the WSUS. Now > I want to do targeting with Group Policies. > > Do I have to create one Group Policy per OU or is there a possibility > to tell the WSUS to use the same Computer Group name for each computer > as the OU that it is located in in the Active Directory (variable in > Group Policy property "Target Group Name for this Computer" or > similar)? If you want to use pure group policy, you will need one GPO per OU. It /might/ be possible to automate it using scripting, but unless you have a very large number of OUs it'll be simpler to use separate GPOs. If you have more than a few OUs you might want to save yourself some work by having a shared GPO, applied to all the OUs, with all the settings except for the target group. Then the individual GPOs only need to configure the target group. That would also make life easier if you later decide to change some of the other settings. :-) (Of course your server OU will want different settings so you'll want just a single GPO for that one.) Harry.
Recommended Posts