Your network contains a Windows Server Update Services (WSUS) server named Server1. Server1
provides updates to client computers in two sites named Site1 and Site2. A WSUS computer group
named Group1 is configured for automatic approval. You need to ensure that new client computers
in Site2 are automatically added to Group1. Which two actions should you perform? (Each correct
answer presents part of the solution. Choose two.)
A.
Create a new automatic approval update rule.
B.
Modify the Computers Options in the Update Services console.
C.
Modify the Automatic Approvals options in the Update Services console.
D.
Configure a Group Policy object (GPO) that enables client-side targeting.
Explanation:
http://technet.microsoft.com/en-us/library/cc720433(WS.10).aspxWSUS enables you to target updates to groups of client computers. This capability can help you
ensure that specific computers get the right updates at the most convenient times on an ongoing
basis. For example, if all computers in one department of your organization have a specificconfiguration (such as all computers in the Accounting team), you can determine what updates
those computers get, at what time, and then use WSUS reporting features to evaluate the success of
update activity for that computer group.
By default, each computer is already assigned to the All Computers group. Computers will also be
assigned to the Unassigned Computers group until you assign them to another group. Regardless of
the group you assign a computer to, it will also remain in the All Computers group. A computer can
be in only one other group in addition to the All Computers group.
You can assign computers to computer groups by using one of two methods, server-side targeting or
clientside targeting, depending on whether or not you want to automate the process. With serverside targeting, you use the Move the selected computer task on the Computers page to move one or
more client computers to one computer group at a time. With client-side targeting, you use Group
Policy or edit the registry settings on client computers to enable those computers to automatically
add themselves into the computer groups. You must specify which method you will use by selecting
one of the two options on the Computers Options page.
Note
If your WSUS server is running in replica mode, you will not be able to create
computer groups on that server, you will only inherit the computer groups created on
the administration server from which your server inherits its settings. For more
information about replica mode, see Running in Replica Mode.
Server-side Targeting With server-side targeting, you use the WSUS console to both create groups
and then assign computers to the groups. Server-side targeting is an excellent option if you do not
have many client computers to update and you want to move client computers into computer
groups manually.
To enable server-side targeting on your WSUS server, click the Use the Move computers task in
Windows Server Update Services option on the Computers Options page.
Client-side Targeting With client-side targeting, you enable client-computers to add themselves to
the computer groups you create in the WSUS console. You can enable client-side targeting through
Group Policy (in an Active Directory network environment) or by editing registry entries (in a nonActive Directory network environment) for the client computers. When the client computers
connect to the WSUS server, they will add themselves into the correct computer group. Client-side
targeting is an excellent option if you have many client computers and want to automate the process
of assigning them to computer groups.
To enable client-side targeting on your WSUS server, click the Use Group Policy or registry settings
on client computers option on the Computers Options page.