Home / server / Questions / 64258
Accepted
Josh Brower
Asked: 2009-09-11 10:16:00 +0800 CST

WSUS vs. GPO: What Policy takes Precedence?

  • 772

I have a WSUS 3.0 SP2 server that has XP Pro workstations getting updates from it. I have a GPO that specifies that the workstation should get updates from the WSUS server and install them at 3am every day. On the WSUS server, when I set a deadline for an update to yesterday (basically, update the machine immediately), the WSUS policy seems to take precedence. Is this correct?

Also, if I don't set a deadline, is that when the GPO policy kicks in? If so, I guess I don't see the use of having WSUS deadlines for updates, except for the "immediately" options. (?)

Josh

windows

1 Answers

  1. Best Answer

    The reason for deadlines is basically as you say...however you may also want to schedule something for "today" as well as immediately.

    Scenario:

    -Your GPO is set to install updates only on Friday at 3am

    -You set a WSUS patch as approved on Tuesday and it is critical to get it out that night, but you don't want it going out immediately, so you set the deadline as 11pm that night.

    But basically what you are saying is correct...the WSUS deadline policy takes precedence.

    Also, if your GPO doesn't specify to reboot, and a deadline for a policy does have a reboot, then it will reboot the computer at the deadline time regardless of when the patch was installed by GPO policies.

    • 4