You are an Enterprise administrator for contoso.com. All the servers in the domain run Windows Server 2008.
Several servers on the corporate network of the company run Windows Server Update Services (WSUS) and distribute updates to all computers on the internal network.
The company has many remote users that connect the internal network from their personal computers using a split-tunnel VPN connection.
You need to deploy a patch management strategy to deploy updates on the remote user’s computers network. While deploying the solution, you need to ensure that the required updates are approved on the WSUS servers before they are installed on the client computers within minimum the bandwidth use?
A.
Implement client-side targeting by create a Group Policy object (GPO).
B.
Create and configure a computer group for the remote users computers to use the internal WSUS server.
C.
Deploy and configure an additional WSUS server to leave the updates on the Microsoft Update Web site and then configure the remote users to use the additional WSUS server.
D.
Use the Connection Manager Administration Kit (CMAK) to create a custom connection and deploy it to all of the remote users computers.
E.
None of the above
Explanation:
To deploy a patch management strategy that deploys updates on the remote user’s computers, you need to deploy an additional WSUS server. Configure the remote users computers to use the additional WSUS server. Configure the additional WSUS server to leave the updates on the Microsoft Update Web site.
WSUS is a client-pull system, not a server-push. That is, the client initiates the connection and downloads, not the server. As long as they can communicate, they will.
Also keep in mind that the connection is not continuous. The client only checks in once a day. It also uses BITS to transfer the downloads, so if the VPN connection is disconnected in the middle, it will automatically recover when it next connects to the server. BITS will also attempt to not saturate you bandwidth, but a problem with BITS is that it measures bandwidth by the connection at your network device (NIC, modem, etc), not the bandwidth along the entire path to the server. Of course, this may have changed in more recent version of BITS.
Reference: WSUS Forums>Technical Support>WSUS 3 Server http://www.wsus.info/forums/index.php?showtopic=11464