GPO for SUS

[agent32]

I have a WAN consisting of 4 locations:
Main branch
Branch 1
Branch 2
Branch 3
I setup SUS on each server at each branch. Branch 1 has
the Internet via T1. Branch 1 synchronizes with Internet,
all the other branches synchronize with branch 1. How do I
setup a GPO and on which server that will have all pc's at
each branch get their windows updates from their server
and not have to go over the WAN.

 

[Brian Desmond [MVP]]

Hi,

What I would do is link a GPO at the site level, as that will provide the
right server to computers in the site's subnets whenever applicable.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[serverguy]

Different OU and GPO for each branch

 

[agent32]

I am new at SUS and GPO's. So please correct me if Im
wron. What I need to do is create an OU and move the
computers I want into that OU then create my GPO

 

[Brian Desmond [MVP]]

Hi,

That is one approach. My preference in this scenario is actually to link the
GPO at the site level. To do this, open AD Sites & services, Right click a
site, goto properties, then group policy. Create a new GPO for that site,
and set the SUS settings in it. Repeat this for each of your sites.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[Guest]

I went to AD Sites & services on branch1 server went to
properties and this is what is there.
Active Directory Sites and Services[branch1.domain.local]
-Sites
--Default-First-Site-Name
Servers
Branch1
Branch2
Branch3
Branch4
--Inter-Site Transports
--Subnets
I setup my GPO by right clicking "Active Directory Sites
and Services[branch1.domain.local]"

Then I went to branch2 and opened AD Sites & services and
it is the same except for the server name.

Active Directory Sites and Services[branch2.domain.local]
-Sites
--Default-First-Site-Name
Servers
Branch1
Branch2
Branch3
Branch4
--Inter-Site Transports
--Subnets


When I go to Group policies the GPO that I created at
branch1 is there. Should it be there and all I need to do
is create another one for branch2. Or are the servers
suppose to be listed directly under Sites.

I found out the way the servers were setup up was at the
branch1 is the Domain controller, at the other branches
the servers where added to the domain and then AD, DNS and
DHCP where installed.