The servers in the DMZ are not part of the domain and you must manually point them to WSUS if you want WSUS to manage their updates.
To do so:
Log into the server which is in the DMZ as an administrator
Go to Run and enter the following command: gpedit.msc
                (this is the local group policy)
When it opens, navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update
The following need to be enabled and edited:
1)      Configure Automatic Updates
  • Enabled
  • Configure automatic updating: 3 – Auto download and notify for install
  • Scheduled install day: 0 – Every day
  • Scheduled install time: 15:00
2)      Specify intranet Microsoft update service location
  • Enabled
  • Set the intranet update service for detecting updates:
  • Set the intranet statistics server:
3)      Automatic Updates detection frequency
  • Enabled
  • Check for updates at the following interval (hours): 1
Now open a Command Prompt and run the following command:
                Wuauclt /detectnow
                This will force the server to report to the WSUS server
 
Note: after installing WSUS and after a week or two and machines are still showing as “Not yet reported,” then install WSUS SP2. )
Categories: