Upstream and Downstream Server Configuration Issues

Question

Hello
We're trying to configure an upstream and downstream server infrastructure.  We believe that we have this configured and working properly but our issue is that local clients and servers are appearing on the downstream server and not the upstream server. 
It would be useful for all clients to be managed from the upstream server to reduce administration time.
We manually assign computers to groups and use Group Policy to specify the client configuration. The client and server settings have these keys specified:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Name: WUServer    Type: REG_SZ    Data: (Downstream Server)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Name: WUStatusServer    Type: REG_SZ    Data: (Upstream Server)
To me, this should mean that clients only get updates from the downstream server and are conmpletely managed from the upstream server but maybe it doesn't work that way?
All downstream servers are set to replicas.
Can anyone help?  I'm sure you shouldn't have to assign every client to group at downstream level.  I have thought about using GPO to assign to groups but it would be complicated with our structure due to testing containers and I think I would
have the same result.
Basically, I would like to assign computers to groups from all sites using the upstream server only.
Thanks in advance,
Luke

Answer 1

our issue is that local clients and servers are appearing on the downstream server and not the upstream server.
Number one cause associated with this symptom is not enabling Reporting Rollup on the upstream server in Options->Reporting Rollup.
It would be useful for all clients to be managed from the upstream server to reduce administration time.
This won't happen in any case. Clients are managed from the WSUS server they are assigned to. You can, however, register more than one WSUS server in the WSUS console and manage multiple WSUS servers from a single console.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Name: WUServer    Type: REG_SZ    Data: (Downstream Server)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Name: WUStatusServer    Type: REG_SZ    Data: (Upstream Server)
This is not correct, but it's not a critical issue since "WUServer" is set correctly. The WUA is just ignoring the incorrect value for "WUStatusServer". Both of these strings should be set to the same value -- the assigned WSUS server.
To me, this should mean that clients only get updates from the downstream server and are conmpletely managed from the upstream server but maybe it doesn't work that way?
It doesn't.
Basically, I would like to assign computers to groups from all sites using the upstream server only.
Not an option. You have two choices with replica servers:
Assign the group memberships from the assigned replica server.
Assign the group memberships via Group Policy.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.