Deploying Security Patches w/ SUS / GP's and OU's

[David Reed]

Hi There,

I am relatively new to AD, and am interested in doing the following:

Setting up Organizational Units, by department, so that I can push out MS
Patch updates via Group Policies, and have some of the OU's automatically
install and reboot after the patches are installed, and other OU's NOT
automatically reboot, but just push the updates out and hold until they are
manually rebooted.

The reason for this is that we are also a laboratory, and restarting some
computers while testing is going on will cause significant problems,
including damage to some of our proprietary hardware, which we build
in-house.

Can anyone point me to articles or white papers on how to do what I'd like
to do, or, if this is an impractical approach, offer an alternative?

Best Regards,
David

 

[JB]

When you create a policy to push an update, the user
still needs to interact. It will ask them if they wish
to reboot now or wait until later. So no worries there.
For more info:
http://www.microsoft.com/windows2000/windowsupdate/sus/def
ault.asp