Configuring Group Policy for Windows Server Update Services on Windows Server 2012 R2 Essentials

This post is intended to be a supplement for the Installing WSUS on Windows Server 2012 R2 Essentials guide.

To configure your client workstations to connect to WSUS, it is highly recommended to use Group Policy. Below I have included examples of Group Policy settings and the necessary WMI filters that can be used as a baseline policy in any environment.

The Default Windows Update Settings policy is intended to the base / default policy that is applied to all systems in the domain.

The Windows Update Settings – Servers policy is intended to supplement the default settings and apply server specific installation settings to server OSes. This policy requires the Servers WMI filter.

The Windows Update Settings – Workstations policy is intended to supplement the default settings and apply workstation specific installation settings to workstation OSes. This policy requires the workstations WMI filter.

WMI Filters

The following filters will work with Windows 7, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2.

Namespace (case-sensitive) WMI Filter
Servers (applies to domain controllers and member servers) root\CIMV2 select * from Win32_OperatingSystem where (Version >= “6.1%”) and ProductType = “2” or ProductType = “3”
Workstations root\CIMV2 select * from Win32_OperatingSystem where (Version >= “6.1%”) and ProductType=”1″
Be Sociable, Share!