After you have installed and configured SUS on your server, your work is not quite complete. You still have to configure the automatic update clients. First of all, you need to install a different version of the Automatic Update software on the workstations. You also need to be aware that this updated version can only be installed on workstations running Windows 2000, Windows XP, and Windows Server 2003.

Once you download the Automatic Update client (WUAU22.msi) from Microsoft’s Web site, you can install it on each workstation. Now you can visit each computer and install it locally or you can use Active Directory. You can use the steps below to use a GPO to deploy the software.

1. Click Start, point to Administrative Tools, and click Active Directory Users and Computers.

2. Right click the appropriate organizational unit and click Properties.
3. From the Group Policy tab, select an existing GPO and click Edit or click New to create a new GPO.
4. Under Computer Configuration, select Software Settings.
5. Right click Software Installation, point to New, and click Package.
6. Locate the WUAU22.msi file and click Open.
7. The Deploy Software window appears. Click Assigned and click OK.

Once the software is deployed, you can then configure the client settings. Again, you can do this locally or through group policy. If you plan to deploy the settings through a GPO you might have load the Automatic Update policy settings. This should be done when SUS is installed. If the settings aren’t available, open the appropriate GPO, under the Computer Configuration or User Configuration, right click the Administrative Templates folder and click Add/Remove Templates. Click Add and locate the Automatic Updates ADM file (wuau.adm) which is located in the Windows\inf directory. Select the adm file and click Open.

You can find the Windows Update settings by navigating to the Administrative Templates/ Windows Components/ Windows Update folder within a GPO. There are four different settings that you can configure.

• Configure Automatic Updates - used to enable or disable automatic updates. If it is enabled you can then select on how updates are downloaded and if the administrator is notified:

• Specify intranet Microsoft update service location - used to configure which intranet SUS server clients will retrieve updates from and to which server they will send statistics to.
• Reschedule Automatic Updates scheduled installations - used to define how long to wait after system startup before proceeding with an installation when a scheduled install has been missed.
• No auto-restart for scheduled Automatic Updates installations - used to configure whether or not the computer is automatically restarted after an update is installed. If this option is enabled, the user currently logged in will be notified to restart the computer. The computer will not be automatically restarted.