Checklist: Ensure That Different Groups of Computers Get Updates

Windows Server Update Services (WSUS) lets you target updates to groups of client computers, so that you can ensure that specific computers always get the applicable updates. You can create computer groups in hierarchies (for example, the Payroll group and the Accounts Payable group underneath the Accounting group). Updates that are approved for a higher group will automatically be deployed to lower groups.

You first configure the client computers to contact the WSUS server before you can assign them to groups and manage them from that server. You can assign computers to computer groups by using one of two methods, server-side targeting or client-side targeting. With server-side targeting, you manually move one or more client computers to one computer group at a time. With client-side targeting, you use Group Policy or edit the registry settings on client computers to enable those computers to automatically add themselves into the previously created computer groups.

WSUS deployment using computer groups

	Step	Reference
	Configure client computers to contact the WSUS Server.	WSUS Step by Step Guide https://go.microsoft.com/fwlink/?LinkId=139836
	Create computer groups in WSUS.	WSUS Deployment Guide https://go.microsoft.com/fwlink/?LinkId=139832
	Assign computers to computer groups.	WSUS Deployment Guide https://go.microsoft.com/fwlink/?LinkId=139832

Additional references

See Also