The servers in the DMZ are not part of the domain and you must manually point them to WSUS if you want WSUS to manage their updates.
To do so:
Log into the server which is in the DMZ as an administrator
Go to Run and enter the following command: gpedit.msc
(this is the local group policy)
When it opens, navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update
The following need to be enabled and edited:
1) Configure Automatic Updates
-
Enabled
-
Configure automatic updating: 3 – Auto download and notify for install
-
Scheduled install day: 0 – Every day
-
Scheduled install time: 15:00
2) Specify intranet Microsoft update service location
-
Enabled
-
Set the intranet update service for detecting updates:
-
Set the intranet statistics server:
3) Automatic Updates detection frequency
-
Enabled
-
Check for updates at the following interval (hours): 1
Now open a Command Prompt and run the following command:
Wuauclt /detectnow
This will force the server to report to the WSUS server
Note: after installing WSUS and after a week or two and machines are still showing as “Not yet reported,” then install WSUS SP2. )
Categories:
