There are two options for assigning endpoints to groups in WSUS.
Configuration in WSUS
Computer Group Actions
In the WSUS option, you can select how the endpoints (computers) will be assigned to the Endpoint Groups (Computer groups).
There are two ways of assignment -
- "Use Group Policy or registry setting on computers" - Client-Side Targeting - The Endpoint Group is determined from the endpoint itself; using a special registry key (that can be defined in GPO) you can decide which group the endpoint will be assigned to when it will be detected in WSUS. JetPatch provides auto-configuration of the needed registry key on the endpoint when deploying the JetPatch agent.
This option is good for an environment with:
- All servers are fully managed and eligible for GPO changes.
- Work-From-Home users that will deploy the JetPatch agent.
- "Use the update services console" - Server-Side Targeting - After a computer has been detected in WSUS, it will be assigned to the "Unassigned Computers" group and the user need to perform a manual change of the computer group to the right one.
- You can choose only one of the methods above, there is no option to combine the two options together.
- In the upcoming versions, JetPatch will provide an automated way to assign the endpoint to an endpoint group, no matter which assignment option has been selected.
Edit the Group Policy that allows client configuration and go to the Windows Update client settings in Computer Configuration / Administrative Templates / Windows Component / Windows Update. Open the Allow client-side targeting 1 setting.
Enable 1 the parameter, enter the group (s) 2 of membership separating by one; and validate by clicking Apply 3 and OK 4.
The parameter is configured, it only remains to wait for the stations update their strategy and contact the WSUS server.