Windows Server Update Services (WSUS) lets you target updates to groups of client computers, so that you can ensure that specific computers always get the applicable updates. You can create computer groups in hierarchies (for example, the Payroll group and the Accounts Payable group underneath the Accounting group). Updates that are approved for a higher group will automatically be deployed to lower groups.

You first configure the client computers to contact the WSUS server before you can assign them to groups and manage them from that server. You can assign computers to computer groups by using one of two methods, server-side targeting or client-side targeting. With server-side targeting, you manually move one or more client computers to one computer group at a time. With client-side targeting, you use Group Policy or edit the registry settings on client computers to enable those computers to automatically add themselves into the previously created computer groups.

WSUS deployment using computer groups

  Step Reference
Check box

Configure client computers to contact the WSUS Server.

WSUS Step by Step Guide http://go.microsoft.com/fwlink/?LinkId=139836

Check box

Create computer groups in WSUS.

WSUS Deployment Guide http://go.microsoft.com/fwlink/?LinkId=139832

Check box

Assign computers to computer groups.

WSUS Deployment Guide http://go.microsoft.com/fwlink/?LinkId=139832

Additional references

For more information about how to manage WSUS computer groups, see the WSUS Operations Guide at http://go.microsoft.com/fwlink/?LinkId=139838.

See Also