This post is intended to be a supplement for the Installing WSUS on Windows Server 2012 R2 Essentials guide.
To configure your client workstations to connect to WSUS, it is highly recommended to use Group Policy. Below I have included examples of Group Policy settings and the necessary WMI filters that can be used as a baseline policy in any environment.
The Default Windows Update Settings policy is intended to the base / default policy that is applied to all systems in the domain.
The Windows Update Settings – Servers policy is intended to supplement the default settings and apply server specific installation settings to server OSes. This policy requires the Servers WMI filter.
The Windows Update Settings – Workstations policy is intended to supplement the default settings and apply workstation specific installation settings to workstation OSes. This policy requires the workstations WMI filter.
WMI Filters
The following filters will work with Windows 7, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2.
| Namespace (case-sensitive) | WMI Filter | |
| Servers (applies to domain controllers and member servers) | rootCIMV2 | select * from Win32_OperatingSystem where (Version >= “6.1%”) and ProductType = “2” or ProductType = “3” |
| Workstations | rootCIMV2 | select * from Win32_OperatingSystem where (Version >= “6.1%”) and ProductType=”1″ |
Tom on Tech 