One of the great features of Windows Server Update Services is its ability to group computers. Once a group is created, updates can be deployed and reporting can be performed on a group-by-group basis. This allows for servers and clients to be grouped by application, criticality, or business unit, each with different update policies applied to them.
In this recipe, we will be using an update server with multiple clients. We will be creating a group for the domain controllers in our environment in order to maintain a consistent patch level on the systems.
For this recipe we will be using a WSUS server configured as shown in the Configuring WSUS update synchronization recipe with one or more clients configured as shown in the Configuring the Windows Update client recipe.