How best to deal with remote sites on slower WAN links?

i have wsus controlling patches gpo @ our main site no such control on patching @ our 4 remote sites - best method of doing given not want machines downloading patches main site?

one option possibly be separate gpo sites ties in main wsus can point them net patches?  if simple enough, may use method however that not work many blocked net @ moment - change when setup bloxx web control device in coming weeks.

another possibility wondering - is possible pre-populate a wsus patch set on remote sites (downstream or replica) linked main sites database gpo force sites update there? (can install wsus on member server?)

any suggestions welcome.

the sites connected outside world tri-bonded adsl tunnels between sites. the sites connect main site exchange (and dynamics ax across ts), therefore want keep lines quiet (hence reticence in having site pc's pull directly here).

i think may have erred making implementation decision (block wsus wan circuits) before understanding nature of utilization of circuts have -- both wsus, exchange, , dynamics ax.

not mention there seem beaucoup available bandwith on a "tri-bonded adsl" circuit, , thousands of organizations doing fine less bandwidth.

i think fact didn't cannot install on member server...

not necessary me call out explicitly . . . it's documented. frankly, didn't notice parenthetical question, , until answer question of whether planning use replica servers answered -- wasn't relevent.

this how last company setup then, it's sites better connected.

i think either have mischaracterized how these sites connected, or have interesting perspective of constitutes "better connected", or more point -- sufficient connections implementing wsus. honest.. if you're using windows update manually update each individual pc right --then you've proven have sufficient bandwidth use wsus.

btw, hoping there way patch store populated on each remote site server , tie in central db (therefore not pulling on 3gb down tunnel, potentially during busy time). assume there isn't?

suggest reading deployment guide before making further implementation decisions, or considering implementation options. preloading content on server before shipping remote site trivial. percentage of 3gb content of database replicate small fraction of total amount, given of data in wsus datbase status , reporting data, not update metadata.

---

lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
principal/cto, onsite technology solutions, houston, texas
microsoft mvp - software distribution (2005-2010)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin
blog: http://onsitechsolutions.spaces.live.com

Windows Server  >  WSUS