The WSUS computer group created from a host group of JP1/Software Distribution is placed in the highest WSUS. However, a client that is not managed by the highest WSUS server is not registered into the created WSUS computer group even if that client is included in the host group.

To register a client managed by a lower WSUS server into the WSUS computer group, you must execute the dcmwsus command. In this case, execute the dcmwsus command twice, once for each of the purposes described below:

• Creating a WSUS computer group (synchronous execution with the highest WSUS server)
  Create the WSUS computer group that was created at the highest client also at the lower WSUS server. The client is not to be registered.
  
• Registering the client into the WSUS computer group
  Register the client into the WSUS computer group that was created by synchronous execution with the highest WSUS server.
  

By executing the command on each WSUS, you can match the clients that are registered in the host group and in the WSUS computer group.

You can also use the dcmwsus command to create a WSUS computer group in the highest WSUS.

You can use the dcmwsus command to apply to a lower WSUS the authentication status of update programs that was set by the highest WSUS.

When the dcmwsus command is executed to create a WSUS computer group synchronously with the highest WSUS, the authentication status of update programs is also applied to the lower WSUS.

The following shows an example of operation when WSUS with a hierarchical structure is linked.

Figure 7-15 Example of operation when WSUS with a hierarchical structure is linked (1/2)

To link with WSUS with a hierarchical structure:

1. Create the WSUS computer group Group 1 for the highest WSUS (WSUS server 1).
   In the created WSUS computer group, only those clients that are managed by WSUS server 1 are registered.
   
2. Set the authentication status of the update programs for the created WSUS computer group Group 1.
3. Execute the dcmwsus command to synchronize with the lower WSUS.
   The WSUS computer group and the authentication status of update programs that are managed by the highest WSUS are copied to the lower WSUS.
   

   Figure 7-16 Example of operation when WSUS with a hierarchical structure is linked (2/2)

   

4. Execute the dcmwsus command on the lower WSUS to register the client into the WSUS computer group Group 1.
   In the entire system, update programs will be applied to the clients registered in Group 1 according to the authentication status settings.
   

If you have created or changed a WSUS computer group or changed the authentication status of update programs by the highest WSUS, use the dcmwsus command to execute synchronization and client registration on the lower WSUS.

If the lower WSUS has a multi-level structure, synchronization may not result in deletion of update program authentication status and WSUS computer group depending on the timing. Therefore, Hitachi recommends that you periodically execute synchronization on the lower WSUS.