Changing target group did not move computer on WSUS

[Jordan]

I just setup a replica WSUS 3.0 server to ultimately replace my current one.
On the original server I specified target groups soem time ago so I could
test update on some computer and I deployed the settings using Group
Policies. One of these groups is "IT Tests". The replica WSUS server shows
the groups, updates, and approvals.

I changed the group policies on a small set of computer to have them update
via the replica server now and I also changed their target group to the
group "IT Tests" and approved some updates for IT Tests on the master
server. The update approvals also show on the replica now as well. The
clients I moved over to the replica server by changing their GP settings are
now showing on the replica server, however they appear on the Unassigned
computer group, not the "IT Tests" group.

When I check the local WindowsUpdate.log file in the C:\Windows folder it
had a line showing the change in server and the change in the target group
changed to IT Tests. I have run "wuauclt /resetauthorization /detectnow" to
see if that would kick it into place however it did not. The updates I
approved for the IT Tests group are not being deployed to the computers I
want. They are not seeing any new approvals waiting for them.

If I go to the server and I manually put a computer into the IT Tests group
it will update with all the approved updates, but none of the ones I set to
the new target with GPs move into the IT Tests group on their own.

[Lawrence Garvin [MVP]]

"Jordan" <no...@here.com> wrote in message
news:OHiKBf$rKHA...@TK2MSFTNGP06.phx.gbl...

> The clients I moved over to the replica server by changing their GP
> settings are now showing on the replica server, however they appear on the
> Unassigned computer group, not the "IT Tests" group.

> If I go to the server and I manually put a computer into the IT Tests
> group

Which pretty much tells us that Options | Computers is configured to use
SERVER-side targeting, because if it were configured to use Group Policy you
would not be able to change group memberships at the server console. The
Server needs to be configured in Options | Computers to "Use Group Policy .
. ."

--
Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2010)

My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

[Jordan]

Yes, I had Server targeting enabled so that should do the trick.

"Lawrence Garvin [MVP]" <lawr...@news.postalias> wrote in message
news:unxkVo$rKHA...@TK2MSFTNGP02.phx.gbl...

[Dave Kocsis]

I created an account on this site just to say Thank You! Our WSUS database corrupted and had to be rebuilt. My machines were not moving to the correct groups. I changed this setting and it fixed it right away. Thanks!

> On Wednesday, February 17, 2010 12:37 PM Jordan wrote:

> I just setup a replica WSUS 3.0 server to ultimately replace my current one.
> On the original server I specified target groups soem time ago so I could
> test update on some computer and I deployed the settings using Group
> Policies. One of these groups is "IT Tests". The replica WSUS server shows
> the groups, updates, and approvals.
>
> I changed the group policies on a small set of computer to have them update
> via the replica server now and I also changed their target group to the
> group "IT Tests" and approved some updates for IT Tests on the master

> server. The update approvals also show on the replica now as well. The

> clients I moved over to the replica server by changing their GP settings are
> now showing on the replica server, however they appear on the Unassigned
> computer group, not the "IT Tests" group.
>

> When I check the local WindowsUpdate.log file in the C:\Windows folder it
> had a line showing the change in server and the change in the target group
> changed to IT Tests. I have run "wuauclt /resetauthorization /detectnow" to
> see if that would kick it into place however it did not. The updates I
> approved for the IT Tests group are not being deployed to the computers I
> want. They are not seeing any new approvals waiting for them.
>

> If I go to the server and I manually put a computer into the IT Tests group

> it will update with all the approved updates, but none of the ones I set to

> the new target with GPs move into the IT Tests group on their own.

>> On Wednesday, February 17, 2010 12:51 PM Lawrence Garvin [MVP] wrote:

>> Which pretty much tells us that Options | Computers is configured to use
>> SERVER-side targeting, because if it were configured to use Group Policy you
>> would not be able to change group memberships at the server console. The
>> Server needs to be configured in Options | Computers to "Use Group Policy .
>> . ."
>>
>>
>>
>> --
>> Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
>> Principal/CTO, Onsite Technology Solutions, Houston, Texas
>> Microsoft MVP - Software Distribution (2005-2010)
>>
>> My Blog: http://onsitechsolutions.spaces.live.com
>> Microsoft WSUS Website: http://www.microsoft.com/wsus
>> My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

>>> On Wednesday, February 17, 2010 3:13 PM Jordan wrote:

>>> Yes, I had Server targeting enabled so that should do the trick.

>>> Submitted via EggHeadCafe - Software Developer Portal of Choice
>>> Simple .NET HEX PixelColor Utility
>>> http://www.eggheadcafe.com/tutorials/aspnet/5617a491-963d-4510-b8f1-1863ddf52bc1/simple-net-hex-pixelcolor-utility.aspx