[SOLVED] WSUS Child Target Groups

We have 9 different sites with users categorized by department.  The AD structure looks something like this:

• OU=Office 1
  • OU=Accounting
  • OU=Admin
  • OU=HR
• OU=Office 2
  • OU=Accounting
  • OU=Admin
  • OU=HR
• ...
• OU=Office 9
  • OU=Accounting
  • OU=Admin
  • OU=HR



As you can see the departments exist across all sites: Accounting, Admin, HR etc.  I want to do something similar in WSUS so I can limit approvals to specific departments in specific offices *just in case* something goes awry.  We want to avoid a huge influx of calls to the Help Desk if a specifc update breaks a specific application, especially one that's unique to that department.  (This way we don't have to worry about having everyone in the accounting department down across the company.)  So the structure I'm looking to setup in WSUS would match what we have in AD:

• Office 1
  • Accounting
  • Admin
  • HR
• Office 2
  • Accounting
  • Admin
  • HR
• ...
• Office 9
  • Accounting
  • Admin
  • HR



Now, if I configure a GPO under the 'Accounting' OU under the 'Office 1' OU, how do I know that the machines are actually going to go into the WSUS Office 1 Accounting target group versus the Office 2 Accounting target group or some other Office Accounting target group?




How can I specify a specific child target group? E.g.:

• Go into Office 1
  • Accounting
• Go into Office 2
  • Accounting

Can I do something like 'Office 1\Accounting' or 'Office 2\Accounting' in the GPO?  Will that translate properly?

OR Will I have to create uniquely named WSUS Target groups (see below) and target machines using the unique name: 'O1-Accounting', 'O2-Admin' etc?

• Office 1
  • O1-Accounting
  • O1-Admin
  • O1-HR
• Office 2
  • O2-Accounting
  • O2-Admin
  • O2-HR
• ...
• Office 9
• O9-Accounting
• O9-Admin
• O9-HR

Is the question clear?