Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a WSUS 3.0 SP2 server that has XP Pro workstations getting updates from it. I have a GPO that specifies that the workstation should get updates from the WSUS server and install them at 3am every day. On the WSUS server, when I set a deadline for an update to yesterday (basically, update the machine immediately), the WSUS policy seems to take precedence. Is this correct?

Also, if I don't set a deadline, is that when the GPO policy kicks in? If so, I guess I don't see the use of having WSUS deadlines for updates, except for the "immediately" options. (?)

Josh

share|improve this question

1 Answer 1

up vote 4 down vote accepted

The reason for deadlines is basically as you say...however you may also want to schedule something for "today" as well as immediately.

Scenario:

-Your GPO is set to install updates only on Friday at 3am

-You set a WSUS patch as approved on Tuesday and it is critical to get it out that night, but you don't want it going out immediately, so you set the deadline as 11pm that night.

But basically what you are saying is correct...the WSUS deadline policy takes precedence.

Also, if your GPO doesn't specify to reboot, and a deadline for a policy does have a reboot, then it will reboot the computer at the deadline time regardless of when the patch was installed by GPO policies.

share|improve this answer
    
Thanks for clearing it up! –  Josh Brower Sep 11 '09 at 11:33

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.