Using Software Update server without binding Mac to Lion Server domain

I've got a Mac Mini Server running Lion Server. Right now, it is serving the Netboot and DHCP services. I'd like to set it up as a Software Update server so Mac users in my office can run their software updates more quickly.

This is the only Mac server in the office. All of our other servers are all Windows based. Most of the machines (Macs included) are joined to our Windows domain. All the Mac users in the office use portable MacBooks Pro that go home with them at the end of the day. They need to still be able to run use the Apple Software Update server when not in the office.

I'm looking for a way to have these Macs only use the Software Update server on my Mac Mini Server when in the office and for it to default to the Apple Software Update server when they're not in the office.

I found this, but it does not run on Lion.

Is this possible?

Solution 1:

There is a way to do this, but it involves fiddling with DNS to make a 'transparent' software update server. When clients are on your network, their requests to "Apple's" SWU servers go to yours, without any modification of client settings, it truly is transparent.

Check this article out. It's a little old, but this is the general idea that you want to be going with.

In your internal DNS set swquery.apple.com, swcdn.apple.com, and swscan.apple.com as CNAMEs for the server running SUS.

Solution 2:

You could also script a defaults write com.apple.SoftwareUpdate CatalogURL triggered by a network change, such as grepping for ifconfig or scutil's State:/Network/Interface/en0/IPv4. Probably easy to do with Lingon etc as well.