Configuring WSUS Computer Groups

To specify what updates go to which computers at what time, organize your computers into computer groups. By default, each computer is always assigned to the All Computers group. As new computers are added, they will be assigned to the Unassigned Computers group until you assign them to another group. Other than the computers that are members of the All Computers group, a computer can only be assigned to one other group.

When planning the computer groups, you should create several groups so that you can use a layered approach when pushing the updates. A layered approach allows you to push updates to a test group. You can then roll out the updates to other groups as needed.

Create a Computer Group

To create computer group, perform the following steps:
1. Open Server Manager.
2. At the top of Server Manager, click Tools > Windows Server Update Services.
3.In the left pane, expand Computers so that you can see All Computers (see Figure 1).

CONFIGURING WSUS COMPUTER GROUPS 1

Figure 1 Viewing Computers node

4. Right-click All Computers and choose Add Computer Group (see Figure 2). The Add Computer Group dialog box opens.

CONFIGURING WSUS COMPUTER GROUPS 2

Figure 2 Adding a computer group

CONFIGURING WSUS COMPUTER GROUPS 3

Figure 3 Typing a computer name group

5. In the Name text box, type the name of the computer name group (see Figure 3).

6. Click Add to apply your settings and to close the Add Computer Group dialog box.

To assign computers to groups, use:
Server-side targeting, whereby you manually assign the computer to a group.
Client-side targeting, whereby the computers are automatically assigned to a computer group by using group policies or whereby someone manually modifies the registry.

With server-side targeting, you manually move the selected computer task on the Computers page to move to another computer group. With client-side targeting, you use Group Policy or you edit the registry settings on client computers to enable those computers to automatically add themselves into the computer groups. You must specify which method you will use by selecting one of the two options on the Computers Options page.

Specify the Method of Assign Computers to Groups

To specify the method on how computers are assigned to a group, perform the following steps:
1. Open Server Manager.
2. At the top of Server Manager, click Tools > Windows Server Update Services.
3. In the left pane, expand the nodes under the server, and then click Options.
4. In the main pane, click Computers. The Computers dialog box opens (see Figure 4).

CONFIGURING WSUS COMPUTER GROUPS 4

Figure 4 Specifying how computers are assigned to groups

Figure 4 Specifying how computers are assigned to groups

5. To perform server-side targeting, select Use the Update Services console.
6. To perform client-side targeting, select Use Group Policy or registry settings on
computers.
7. Click OK to apply your settings and to close the Computers dialog box.

Move a Computer to a different Group by using a Server-Side Targeting

To move a computer to a different group by using Server-Side Targeting, perform the following steps:
1. Open Server Manager.
2. At the top of Server Manager, click Tools > Windows Server Update Services.
3. In the left pane, expand the nodes under the server. Expand the Computers node, and then click All Computers.
4. In the All Computers pane in the middle of the screen, right-click the computer you want to move, and then choose Change Membership (see Figure 5).

CONFIGURING WSUS COMPUTER GROUPS 5

Figure 5 Moving a computer

5. When the Set Computer Group Membership dialog box opens (see Figure 6), select the computer group you want to move the computer to, and then click OK.

CONFIGURING WSUS COMPUTER GROUPS 6

Figure 6 Selecting a computer group

6. Click OK to apply your settings and to close the Computers dialog box.

Using  Windows PowerShell

To get a list of all client computers using Windows PowerShell, you can use the following command:

Get-WsusComputer -All
To add the computer called PC1 to the Clients group, use the following command:
Add-WsusComputer –Computer PC1 –TargetGroupName “Clients”
To add all computers with PC in the name to the target group called Clients, use the following command:
Get-WsusServer Get-WsusComputer -NameIncludes pc | Add-WsusComputer
-TargetGroupName “Clients”