This is great, but in those branch offices there is no administrator you can delegate to maintain the WSUS servers, approve updates, take care of the client errors that might pop-up or don’t update.
However for this lab I will choose to use and upstream WSUS server to download updates from.
To configure this WSUS server with the upstream server (WSUS from HQ) click the Start Connecting button.
If you need more information on how to configure group policy for WSUS clients, read this guide.
On the branch offices you can start the installation of those WSUS servers.
In case you want to use SSL, first you need to configure the upstream WSUS server for SSL, than come back here and continue the wizard by checking the Use SSL while synchronizing update information box.
If you don’t want your downstream replica servers to download updates from an upstream WSUS server, and download them from Microsoft, leave the first option enabled and just check the box This is a replica of the upstream server.
In the bellow picture you can see the OU’s from my lab environment. I named them that way so you can make a better image of what’s going on.
As you can see I created OU’s for my branch offices and for the HQ and in every one of them there are computers belonging to that office. I don’t want computers to update at the same time on all offices.
The main office WSUS server is running on Windows server 2012 and this is what I’m going to deploy on the branch offices to.
Windows 7 and Windows 8 clients are running on these branch offices.
After the installation is done the WSUS Service Configuration Wizard should pop-up.