is there any way to let client-PCs use the local WSUS-server without having to configure them?

What we need is a system to update PCs before they are delivered to the users. So the WSUS-server is accessible only within our lab, not later on at the users place.

We'd like to use WSUS because it will fasten up the download very much. And we don't like to modify the clients as those changes might be forgotten to remove and then at the users place no update will be possible.

So the easiest way would be, if one could redirect the normal Microsoft update, but I'm pretty sure that this will not be possible as this update will not be WSUS compliant.

An other option I thought of might be, that the DHCP delivers an extra option telling the clients where to get the updates. But I could not find any information about this, so it looks like that this isn't possible too.

So, is there any way? Or will it be easier to use a little script to change the WSUS-entries automatically?

Regards sc911


If you do not have them on a domain, you could import the relevant settings via a registry file. So to directly answer your question, no you can't. Even in a domain environment you are still configuring them by group policy. Everything takes configuration, I think you are just looking for the simplest way. Running one batch/reg file per machine is going to take less time then setting them up manually.

Reference: Configure Automatic Updates in a Non–Active Directory Environment


Windows Registry Editor Version 5.00


; 'Install Updates and Shut Down' option will be available in the Shut Down Windows dialog box if updates are available
; False (Do not disable AutoUpdate)
; 4 – Scheduled install (valid only if legal values are also specified for ScheduledInstallDay and ScheduledInstallTime).
; Every day at 8 AM
; Allow reboots with logged on users
  • Yes, I am aware of this solution. But as you stated I guess there will be no 'yes' to my specific question. thx! – sc911 Apr 28 '10 at 9:35

I use WSUS for the same purpose.

I setup WSUS to download updates. Grouped the computers into "Workstations" and "Servers" then I setup in the domains group policy where the client machines get their updates.

Seems like this is what you want to do.

If you ever need to change the update server or how the clients are getting their updates you just simply modify the GPO.

Here is the location: GPO Domain Policy Expand: Computer Configuration > Administrative Templates > Windows Update

You should configure all that apply, but the specific GPO you must set is: "Specify intranet Microsoft Update Service Location" Here is where you can specify your WSUS server.

Hope this helps.

  • The Problem is, that the clients are no longer in the domain when they are at the user. The domain is only internal and the clients should not even join the domain. – sc911 Apr 27 '10 at 15:37
  • Well then this creates an issue.... How do you plan to manage these computers? Looks like you will have to manage them individually.... – Campo Apr 27 '10 at 15:40
  • There will be no management afterwards. – sc911 Apr 28 '10 at 9:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.