As we all know ConfigMgr uses WSUS to facilitate Patch Management.
In order to make this work, some GPO settings need to be enabled to allow clients to receive and install updates.
The ConfigMgr 2007 client sets a local policy setting to a value.
It sets the intranet update location to the Software Update Point SUP if the site it is assigned to.
The funny thing is, this setting alone will not enable the Automatic Updates feature, even when the agent setting is configured.
Now with ConfigMgr 2012 RC, no local policies are set at all.
Looks like a GPO on domain level needs to be confgured to enable this feature.
Just as with ConfigMgr 2007, I create a GPO which has the following settings enabled:
- Configure Automatic Updates
- Specify intranet Microsoft update service location
- Allow signed updates from an intranet Microsoft update service location (optional but strongly recommended if you consider using System Center Updates Publisher (SCUP) 2011)
For the ‘Specify intranet Microsoft update service location’, I use the server which is configured as the SUP of your site.
To make it look more elegant, you can use a CNAME record if you prefer to hide the actual servername.
Assigning this GPO to the required target to satisfy your needs should do the trick.