Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are a school with limited bandwidth. We have tons of Windows clients which are not joined to the domain, and we will never directly manage. Is it possible to set up a WSUS server that will impersonate Microsoft's update servers internally on our network by setting up local DNS, or is there a good way to set up a similar system instead using a proxy?

WSUS would be nicer for statistics on clients if its possible, but if we are able to save some bandwidth by using a proxy server that may work OK too. The biggest thing is that we are not able to modify every machine on that network, it must work based on infrastructure changes alone.

share|improve this question
I have this same situation. A few thoughts: with WSUS, you can approve/deny specific Windows updates. How would the server handle these choices for non domain machines? Without access to the clients, how would you determine whether an update actually installed successfully or failed? –  minamhere Nov 18 '10 at 4:31
1. The server would only advertise updates that were approved. Most likely for my setup, we would have new updates being auto-approved to minimize the maintenance load. –  user60643 Nov 19 '10 at 20:57
2. My assertion that we could use WSUS was based on the (perhaps incorrect) assumption that the WSUS did things in the very same way that the Microsoft Update servers do things. If that is an incorrect assumption, than any hope of using WSUS in this environment is gone, and all I can hope to do is to save bandwidth, and potentially monitor downloads, by having some kind of a proxy server that the clients would talk through. –  user60643 Nov 19 '10 at 21:00
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.