[Samba] Wsus

[Thomas Maerz]

You should not need two servers. You can join a non-DC windows server to a Samba4 Domain and run WSUS on that without any Windows domain controllers at all. It sounds like he doesn’t have/want any windows servers at all, though so this may not be helpful anyway.


> On Jul 15, 2016, at 12:09 PM, Sketch <smblist at rednsx.org> wrote:
> 
> On Fri, 15 Jul 2016, Thomas Maerz wrote:
> 
>> You can join a Windows Server to a Samba4 Domain controller and set up the WSUS server role and it should work. HOWEVER, if you are going to point all your devices at the WSUS server, you will require CALs for the devices or the users using them to maintain licensing compliance with Microsoft. At this point, you have paid for the number of Windows Server CALs you need to run actual Active Directory and may as well not use Samba at all as it is arguably less reliable (in some situations) and feature rich than a modern Microsoft AD implementation.
> 
> While that may sound like a good idea, you can't run WSUS on a domain controller, so you're going to need at least two Windows servers.
> 
> You could run 2 windows servers on the same VM host so that they share the same OS license.  However, while I could be wrong, I don't think you can share CALs that way.
> 
> That said, you can definitely run a WSUS server on a Samba 4 domain.  All of our DCs are S4, the only Windows server in our environement is a 2008 R2 VM running WSUS and centralized AV.