Updating laptops that randomly move between LAN and Internet?

-

optimize speed , bandwidth utilization, laptops pull updates our local wsus content store when brought office , connected lan.  when same laptops taken offsite laptops download updates microsoft update servers on internet.

don't want laptops on internet having pull updates our internal wsus , don't want laptops on lan pulling updates microsoft.



what's best way reliably? 

setting group policy configures windows update location @ site level instead of @ ou level , setting vpn network on different ad site?  that way when laptop connects vpn , refreshes group policy, windows update policy point downloading microsoft, , when same laptop brought on corporate lan, group policy change internal wsus server.

seems possibly work, see problems because policy update change may not timely.

if laptop on lan set check approvals , download updates our internal wsus, taken offsite , used on internet, not connected vpn?  in case still configured wsus , because never received group policy change, keep trying , failing check in configured wsus sercer , never update again until connected vpn or brought office again.

there way handle situation such kind of location aware reconfiguration or configuring automatic failover updates microsoft when wsus not available?  we our antivirus.  when system able contact our internal av management server, pulls definition updates there , if cannot reach it, pulls updates antivirus vendor's site on internet.

hi mygposts,

according description, want make laptop update wsus when connect internal network, update microsoft update when connect internet.

if want client check updates internet, we can manually click "check online updates windows updates", although configured automatic update wsus.

so, when laptop outsides, may manually update, when inside, use wsus automatic update

best regards,

anne

please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com.



Windows Server  >  WSUS



Comments

Post a Comment

Popular posts from this blog

Global Catalog ?

-
greetings! we have set 2008 r2 x64 server in our company. -we promote server dc -we add ad roles -we have transfered fsmo roles on server -we have add dns role on server question: server going our primary dc, cause old 1 eventualy going shut down completely. must still export , import dhcp new server. problem/question global catalog. have 1 forest, 2 domains. in primary domain 3 dc's (this new server 1 of them), , in child domain have 2 dc's. -is wrong if new server holds global catalog? read somewhere fsmo roles , global catalog together, not recommended? -would wrong if every dc in our company global catalog? with best regards, bostjan bostjanc you have 2 domains. need 1 schema master , 1 domain naming master in forest. recommended these roles reside on dc's in root domain, not required. need 1 pdc emulator, rid master, , infrastructure master each domain. in case, in both of your domains, either dc's should gc's, or infrastructure ma...
Read more

mailing list

-
how create mailing list see article "creating mail merge data source” at: http://www.word.mvps.org/faqs/mailmerge/createadatasource.htm  -- hope helps. doug robbins - word mvp, dkr[atsymbol]mvps[dot]org posted via community bridge "mailing list" wrote in message news:25d6abcb-1717-4ec8-9587-860696c38f53@communitybridge.codeplex.com... how create mailing list doug robbins - word mvp dkr[atsymbol]mvps[dot]org Microsoft Office  >  Word IT Pro Discussions
Read more

Global Catalog

-
why recommended microsoft have global catalog in domain controller? why message import infrastructure master role in case not install global catalog in secondary dc? you can read here. https://technet.microsoft.com/en-us/library/cc737269(v=ws.10).aspx  in single-domain forest, configure domain controllers global catalog servers. because every domain controller stores domain directory partition in forest, configuring each domain controller global catalog server not require additional disk space usage, cpu usage, or replication traffic. in single-domain forest, domain controllers act "virtual global catalog servers" in can respond authentication or service request. special condition single-domain forests design (authentication requests not require contacting global catalog server, when there multiple domains , user can member of universal group exists in different domain). however, domain controllers designated global catalog servers can respond global catalog...
Read more