puppetlabs / puppetlabs-wsus_client

puppetlabs - wsus_client module
Apache License 2.0
9 stars 32 forks source link

Fix Issue 198 - Disable Dual Scan #225

Open brajjan opened 3 months ago

brajjan commented 3 months ago

Add parameter disable_dual_scan (default undef) to be able to not allow update deferral policies to cause scans against Windows Update when using WSUS server

As I'm new to tests - please verify if more tests are needed.

Summary

Adds a new boolean parameter disable_dual_scan that defaults to undef. Set to true of you need to disable Dual Scan to prevent a client from trying to connect to Windows Update sources even though you have configured the server to get updates from WSUS

If this is not applied and Deferal settings has been set before in a GPO - The client will still have that settings in a cache that sets the client to fetch updates from Windows Update source instead of WSUS

If not applied - this could happen

PS C:\> Get-WUServiceManager

ServiceID                            IsManaged IsDefault Name
---------                            --------- --------- ----
7971f918-a847-4430-9279-4a52d1efe18d False     False     Microsoft Update
8b24b027-1dee-babb-9a95-3517dfb9c552 False     False     DCat Flighting Prod
855e8a7c-ecb4-4ca3-b045-1dfa50104289 False     False     Windows Store (DCat Prod)
3da21691-e39d-4da6-8a4b-b43877bcb1b7 True      False     Windows Server Update Service
9482f4b4-e343-43b6-b170-9a65bc822c77 False     True      Windows Update

When this property is set

PS C:\> Get-WUServiceManager

ServiceID                            IsManaged IsDefault Name
---------                            --------- --------- ----
7971f918-a847-4430-9279-4a52d1efe18d False     False     Microsoft Update
8b24b027-1dee-babb-9a95-3517dfb9c552 False     False     DCat Flighting Prod
855e8a7c-ecb4-4ca3-b045-1dfa50104289 False     False     Windows Store (DCat Prod)
3da21691-e39d-4da6-8a4b-b43877bcb1b7 True      True      Windows Server Update Service
9482f4b4-e343-43b6-b170-9a65bc822c77 False     False     Windows Update

Additional Context

Add any additional context about the problem here.

Related Issues (if any)

Mention any related issues or pull requests. closes #198

Checklist

CLAassistant commented 3 months ago

CLA assistant check
All committers have signed the CLA.