| Author | Messages | |
AD000001165
Posts:0
 | | 08/25/2005 2:28 AM |
| Friends,
Our company is about to implement a WSUS server for patching and updates. I
am wondering if there is any way to allow for breaking the updates down into
groups (say by department) but using only a single GPO to do it?
For instance, we have our legal and executive departments using a separate
GPO, which would allow for them to get updates Tuesday @ 12:00 or Wednesday
@ 12:00, respectively. Our other departments are set up along similar lines,
with 5 GPO's in all active.
What I'm seeing is a general "slowdown" in login processing time (from sign
in to desktop appearing) due ...I'm guessing, to the GPO having to run
through and check against Group Membership or process. I'm looking for any
ideas on whether this is the "only" arrangement for making this happen, or
I'm missing something that might be a possibility.
Thanks in advance.
-Steve
--
Steven L. Dunn
Director of Information Technology
Illinois State Bar Association
sdunn@xxxxxxxx | 217-747-1455
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| AARON_VISSER@xxxx.yyy
| | 08/25/2005 2:43 AM |
| No I do not believe this would be possible without creating more than 1 GPO,
however WSUS does allow you to break down the computers into groups but I am
pretty sure this is strictly for patch management and not release
management(ie picking what groups get what patches but not when they get
them)
Aaron
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx]On Behalf Of Steven L Dunn
Sent: Thursday, August 25, 2005 7:27 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] OT: Question on WSUS implementation and GPO's...
Friends,
Our company is about to implement a WSUS server for patching and updates. I
am wondering if there is any way to allow for breaking the updates down into
groups (say by department) but using only a single GPO to do it?
For instance, we have our legal and executive departments using a separate
GPO, which would allow for them to get updates Tuesday @ 12:00 or Wednesday
@ 12:00, respectively. Our other departments are set up along similar lines,
with 5 GPO's in all active.
What I'm seeing is a general "slowdown" in login processing time (from sign
in to desktop appearing) due ...I'm guessing, to the GPO having to run
through and check against Group Membership or process. I'm looking for any
ideas on whether this is the "only" arrangement for making this happen, or
I'm missing something that might be a possibility.
Thanks in advance.
-Steve
--
Steven L. Dunn
Director of Information Technology
Illinois State Bar Association
sdunn@xxxxxxxx | 217-747-1455
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| deji
Posts:262
| | 08/25/2005 2:56 AM |
| Correct. WSUS has internal logic that staggers the deployment/install such
that the clients are not pulling all at the same time. My experience has been
that this staggering is sufficient, and, depending on the number of clients
and sites you have, one server can accommodate and service the requests
without the manual intervention you are doing right now.
Sincerely,
Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx on behalf of Aaron Visser
Sent: Thu 8/25/2005 7:40 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] OT: Question on WSUS implementation and GPO's...
No I do not believe this would be possible without creating more than 1 GPO,
however WSUS does allow you to break down the computers into groups but I am
pretty sure this is strictly for patch management and not release
management(ie picking what groups get what patches but not when they get
them)
Aaron
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx]On Behalf Of Steven L Dunn
Sent: Thursday, August 25, 2005 7:27 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] OT: Question on WSUS implementation and GPO's...
Friends,
Our company is about to implement a WSUS server for patching and updates. I
am wondering if there is any way to allow for breaking the updates down into
groups (say by department) but using only a single GPO to do it?
For instance, we have our legal and executive departments using a separate
GPO, which would allow for them to get updates Tuesday @ 12:00 or Wednesday
@ 12:00, respectively. Our other departments are set up along similar lines,
with 5 GPO's in all active.
What I'm seeing is a general "slowdown" in login processing time (from sign
in to desktop appearing) due ...I'm guessing, to the GPO having to run
through and check against Group Membership or process. I'm looking for any
ideas on whether this is the "only" arrangement for making this happen, or
I'm missing something that might be a possibility.
Thanks in advance.
-Steve
--
Steven L. Dunn
Director of Information Technology
Illinois State Bar Association
sdunn@xxxxxxxx | 217-747-1455
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| rkingsla@xxxx.yyy
| | 08/25/2005 3:19 AM |
| It's not likely due to GPO processing. GPOs themselves are typically very
quick to process, unless there is either Software Install that is taking
place through the GPO or complex WMI filtering that would slow it down.
Otherwise, GPO is very fast.
I've done testing with 1 GPO and with 50 GPOs... Appreciable difference in
log on time? Less than 1 second.
It's something else other than GPO.
Rick
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Steven L Dunn
Sent: Thursday, August 25, 2005 9:27 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] OT: Question on WSUS implementation and GPO's...
Friends,
Our company is about to implement a WSUS server for patching and updates. I
am wondering if there is any way to allow for breaking the updates down into
groups (say by department) but using only a single GPO to do it?
For instance, we have our legal and executive departments using a separate
GPO, which would allow for them to get updates Tuesday @ 12:00 or Wednesday
@ 12:00, respectively. Our other departments are set up along similar lines,
with 5 GPO's in all active.
What I'm seeing is a general "slowdown" in login processing time (from sign
in to desktop appearing) due ...I'm guessing, to the GPO having to run
through and check against Group Membership or process. I'm looking for any
ideas on whether this is the "only" arrangement for making this happen, or
I'm missing something that might be a possibility.
Thanks in advance.
-Steve
--
Steven L. Dunn
Director of Information Technology
Illinois State Bar Association
sdunn@xxxxxxxx | 217-747-1455
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| prenouf
Posts:2
| | 08/25/2005 9:08 AM |
| I believe that looking at the userenv.log file may help you determine
why your client logons are taking longer. It is a great file for
troubleshooting client logon issues. The location on my machine is
c:\windows\debug\usermode
Phil
On 8/25/05, Rick Kingslan wrote:
> It's not likely due to GPO processing. GPOs themselves are typically very
> quick to process, unless there is either Software Install that is taking
> place through the GPO or complex WMI filtering that would slow it down.
> Otherwise, GPO is very fast.
>
> I've done testing with 1 GPO and with 50 GPOs... Appreciable difference in
> log on time? Less than 1 second.
>
> It's something else other than GPO.
>
> Rick
>
> -----Original Message-----
> From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
> [mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Steven L Dunn
> Sent: Thursday, August 25, 2005 9:27 AM
> To: ActiveDir@xxxxxxxxxxxxxxxxxx
> Subject: [ActiveDir] OT: Question on WSUS implementation and GPO's...
>
> Friends,
>
> Our company is about to implement a WSUS server for patching and updates. I
> am wondering if there is any way to allow for breaking the updates down into
> groups (say by department) but using only a single GPO to do it?
>
> For instance, we have our legal and executive departments using a separate
> GPO, which would allow for them to get updates Tuesday @ 12:00 or Wednesday
> @ 12:00, respectively. Our other departments are set up along similar lines,
> with 5 GPO's in all active.
>
> What I'm seeing is a general "slowdown" in login processing time (from sign
> in to desktop appearing) due ...I'm guessing, to the GPO having to run
> through and check against Group Membership or process. I'm looking for any
> ideas on whether this is the "only" arrangement for making this happen, or
> I'm missing something that might be a possibility.
>
> Thanks in advance.
>
> -Steve
> --
> Steven L. Dunn
> Director of Information Technology
> Illinois State Bar Association
> sdunn@xxxxxxxx | 217-747-1455
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
|
|