Home

Summary

Have you ever wanted dynamic, easy to manage client side targeting groups for WSUS?

trbdk3-CST is a small daemon which allows any XP SP3 or higher system to be added and removed from groups dynamically.

I grew tired of needing to iterate complex group memberships in an ever increasing number of separate group policies. This project allows one to assign group memberships based on OUs and computer group memberships within Active Directory.

How It Works

Group Policy Preferences can easily be used to create independent registry keys.
Item Level Targeting allows these keys to easily be bound to different criteria.

trbdk3-CST simply translates a set of registry keys as created above - leveraging the full power of item level targeting for the object definitions - into an appropriate Windows Update definition.

Installation

A small EXE file is created on each destination system. This executable is run as a background service which periodically checks and translates custom registry keys into a WSUS description.

The suggested installation is to use the included trbdk3-CST.msi, deployed via Group Policy or similar. This will create the necessary path, executable and service definition without additional configuration.

Usage

All registry keys created under HKLM\SOFTWARE\trbdk3\CST will be treated as potential group assignments. These keys may be created in any fashion but a Group Policy Preference is suggested.

The name of the key is the desired group name.
The type must be REG_SZ.
The value must be set to 1.

The default value of HKLM\SOFTWARE\trbdk3\CST will be used in the event no other group assignments are present.