WSUS VS SCCM SUP

[Jeff K]

ok i have multiple forests and domains. i have wsus servers in each. we now have all clients with agents. we are thinking of moving away from wsus and onto SCCM SUP. we have remote locations around the world. i want to put a test group together and try it out.

 

A. how can i do this with each forest or domain having a GPO to direct to a WSUS server for updates. - this can be disturbed

b. what steps should i take to ensure this test group can get updates from the SUP server and not the WSUS.

 

I require to start small and work my way little by little up to the whole orgaization being patched this way. i plan to either decommission the old WSUS servers or strip WSUS off and use them as DP's. is this a good idea? should i just decommission them all at once and then bring up new DP's servers?

 

we went a head and had someone come in and already setup the SUP point before me. i see now some clients are currently getting pointed to the WSUS server and some are pointed to the SUP server. how can this be fixed. i could turn off the SUP agent in the client agents and they should go back, correct? if i do this how can i test. i require a simple way of doing this, but i think this is going to be not easy. any help would be great.if i have made anything unclear please let me know.

[Peter van der Woude]

WSUS GPO overwrites the Local Policy of the SCCM Client. So just create an OU that doesn't get a WSUS GPO.

[Jeff K]

WSUS GPO overwrites the Local Policy of the SCCM Client. So just create an OU that doesn't get a WSUS GPO.

 

the other question i have is if i take the wsus gpo now and point it to the sccm server will that automatically update all clients to go there and install the sup installation if turned on?

[Jeff K]

another interesting question:

 

if i turn off the sup agent no the site point, and tell certain ones to use this, will this work or no? i dont want everything to use this, but cant have them come away from wsus right now either.