Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am a computer tech for a local school district - and I'm really still just a college student myself, so maybe you guys could help me out.

Today we had very little bandwidth, so we called our ISP. They responded back with a list of IP addresses on our domain that had all been connection to Microsoft update.

Is there some way I can manage the way Windows fetches updates?

Also is there some way I can apply those Windows update settings to all the machines on the domain?

Thanks in advance for the help!

share|improve this question
up vote 2 down vote accepted

Yes and yes.

First I'd suggest blocking access to the Windows Update IPs at the firewall (except the WSUS box) and logging which clients are misconfigured (useful for finding out of compliance boxes after you've setup the GPO). Make sure you check the log periodically.

Next setup a GPO that's applied to every computer in the domain to configure them to use the WSUS server. Microsoft has a nice article on setting this up. If you have any issues getting this configured, feel free to ask a specific question.

share|improve this answer

Yes, you can configure computers on an Active Directory domain to pull updates from WSUS by using Group Policy.

Managing the WSUS Automatic Updates Client (

If you are preparing workstations using an imaging tool, and the workstation connected to WSUS at least once before having an image taken, be aware that this can confuse the WSUS server, and your clients won't appear in the WSUS console.

Resolving the duplicate SUSClientID issue (

share|improve this answer

Use group policy.

It's pretty much the only answer.

Here's a technet article to help:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.