Does WSUS Have Any Concept of Domain? "Will" <westes-usc[ at ]noemail.nospam> 6/20/2007 6:30:26 AM Does WSUS have any concept of domain membership for computers that contact it? We have three entirely disconnected domains (lab, internal network, and no man's land), and I would like to know if those three domains can all use the same internal WSUS server. -- Will

Re: Does WSUS Have Any Concept of Domain? "Per-Torben Sørensen" <mspts[ at ]ventelo.net> 6/20/2007 7:35:07 AM By using group policy in those domains you can make them all use the same server if the routing and dns is ok. Regards Per-Torben Sørensen "Will" <westes-usc[ at ]noemail.nospam> wrote in message news:LaOdnXClsP0xVOXbnZ2dnUVZ_hynnZ2d[ at ]giganews.com... [Quoted Text] > Does WSUS have any concept of domain membership for computers that contact > it? We have three entirely disconnected domains (lab, internal network, > and no man's land), and I would like to know if those three domains can > all use the same internal WSUS server. > > -- > Will >

Re: Does WSUS Have Any Concept of Domain? "Will" <westes-usc[ at ]noemail.nospam> 6/20/2007 10:16:31 PM And in the Computer Group on the WSUS server I will see simple machine names, with no reference to domain memberships? -- Will "Per-Torben Sørensen" <mspts[ at ]ventelo.net> wrote in message news:%23jjPH2wsHHA.4612[ at ]TK2MSFTNGP04.phx.gbl... [Quoted Text] > By using group policy in those domains you can make them all use the same > server if the routing and dns is ok. > > Regards > Per-Torben Sørensen > > "Will" <westes-usc[ at ]noemail.nospam> wrote in message > news:LaOdnXClsP0xVOXbnZ2dnUVZ_hynnZ2d[ at ]giganews.com... >> Does WSUS have any concept of domain membership for computers that >> contact it? We have three entirely disconnected domains (lab, internal >> network, and no man's land), and I would like to know if those three >> domains can all use the same internal WSUS server. >> >> -- >> Will >> > >

Re: Does WSUS Have Any Concept of Domain? "Matthew Wetmore \(MSFT\)" <mattwe[ at ]online.microsoft.com> 6/20/2007 10:21:27 PM Pretty much as long as you can access file shares and http access to the ports defined at setup on the server - you should be good to go. There are greater trust issues for the administration console, but that's a different problem. -- Matthew Wetmore Developer, WSUS (Windows Server Update Services) This posting is provided "As Is" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm "Per-Torben Sørensen" <mspts[ at ]ventelo.net> wrote in message news:%23jjPH2wsHHA.4612[ at ]TK2MSFTNGP04.phx.gbl... [Quoted Text] > By using group policy in those domains you can make them all use the same > server if the routing and dns is ok. > > Regards > Per-Torben Sørensen > > "Will" <westes-usc[ at ]noemail.nospam> wrote in message > news:LaOdnXClsP0xVOXbnZ2dnUVZ_hynnZ2d[ at ]giganews.com... >> Does WSUS have any concept of domain membership for computers that >> contact it? We have three entirely disconnected domains (lab, internal >> network, and no man's land), and I would like to know if those three >> domains can all use the same internal WSUS server. >> >> -- >> Will >> > >

Re: Does WSUS Have Any Concept of Domain? "Will" <westes-usc[ at ]noemail.nospam> 6/20/2007 10:47:47 PM "Matthew Wetmore (MSFT)" <mattwe[ at ]online.microsoft.com> wrote in message news:%23APvYl4sHHA.3732[ at ]TK2MSFTNGP02.phx.gbl... [Quoted Text] > Pretty much as long as you can access file shares and http access to the > ports defined at setup on the server - you should be good to go. > > There are greater trust issues for the administration console, but that's > a different problem. I need to open up the WSUS server as a file server? I'm putting this thing on a no man's land, and there is no way I want port 445 exposed. You can run RPC-like controls over that port as well as SMB. I would like all interactions to be on port 80. Is it possible to configure WSUS that way? -- Will

Re: Does WSUS Have Any Concept of Domain? "Tom S" <me[ at ]work.com> 6/20/2007 11:08:07 PM It only needs the HTTP port, you don't need file sharing set up on the WSUS server in order for machines to pull updates. "Will" <westes-usc[ at ]noemail.nospam> wrote in message news:otednQfJldYJM-TbnZ2dnUVZ_u-unZ2d[ at ]giganews.com... [Quoted Text] > "Matthew Wetmore (MSFT)" <mattwe[ at ]online.microsoft.com> wrote in message > news:%23APvYl4sHHA.3732[ at ]TK2MSFTNGP02.phx.gbl... >> Pretty much as long as you can access file shares and http access to the >> ports defined at setup on the server - you should be good to go. >> >> There are greater trust issues for the administration console, but that's >> a different problem. > > I need to open up the WSUS server as a file server? I'm putting this > thing on a no man's land, and there is no way I want port 445 exposed. > You can run RPC-like controls over that port as well as SMB. I would > like all interactions to be on port 80. Is it possible to configure WSUS > that way? > > -- > Will >