I have set up WSUS on a Windows Server 2008 box and I have it working with just my machine reporting to it. Now that I'm ready to make this large scale across the company, I'm trying to figure out what is the best way to actually add and group the client computers. It's set up to use Group Policy to add clients. I created a new group policy object strictly to define the WSUS settings.
My question is, can you apply this to computers based on the User AD object or does it have to be by the Computer AD object? The reason I ask is because in AD we have our 100'ish users grouped by department, however all the computers are just unorganized in Domain\Computers. The task I'm facing is that we don't want all of our computers connected to WSUS (like the programmers, for instance). So in this case can I just use the groups that we've already made that consists of "User" members, or do I need to make a new group for each department and add their respective computers to the group? (i.e. a "Finance-Users" group and a "Finance-Computers" group).