Can a non domain server obtain it's updates from a domain WSUS

Anyone know if it is possible to get a non-domain Server to pick-up it's updates from a domain included WSUS server?

Just thinking about Hyper-V host Servers, in a single server environment clearly this cannot be part of the domain because at the time the VM Host boots the Domain Controllers is not available. However is there any way to make this Hyper-V Host collect it's updates from the WSUS server.


Just thinking about Hyper-V host Servers, in a single server environment clearly this cannot be part of the domain because at the time the VM Host boots the Domain Controllers is not available.

Bas problem here: there is nothing stopping a Hyper-V host that is part of a domain from starting when the DC is not available. I had that for years.

You can not use cluster service - but a regular host can be part of a domain and start all vm's without the dc being available.

THAT SAID: I these days keep 2 machiens around that are both, DC and Hyper-V hosts ;)

And to answer the question - yes. It is posssible. Configuration is via local policy editor. Standard WSUS setup has no authentication mechanisms, i.e. it answers to every computer asking.


Yes, it's entirely possible, you just need to modify the registry entries outlined in this technet article