-
Configure WSUS/GPO programmatically
Posted on June 22nd, 2019 No commentsWe have a few hundred Windows PCs across the country. It is essential to keep the OS up to date, just think of the new BlueKeep vulnerability. These PCs are running 7/24 unattended, so we need to automate almost everything, including the Windows Update configuration. These PCs are completely separate from the intranet and do not connect to the Windows Domain, but they have to use the company’s WSUS servers. Each computer had the WSUS server pre-configured using the Local Group Policy (gpedit.msc), but after a few years we had to change the server address. Each PC is supervised by our custom management software. It was obvious that the WSUS server setting should be deployed through the same management system, as well as other settings. Read the rest of this entry »