I'm looking for a solution where I don't change our current AD groups, (avoid using a local group and a field group), also trying to avoid using a server in a DMZ to handle field people (will need to buy a new server).
At the end i'm looking to use a replica server to push updates from the internet to the field group (or OU with a GPO pointing to such replica server) and use the local server to host the updates locally and push to the office people.
Probably this is the question that needs to be answered, can an OU group have 2 different GPO's pointing to 2 different WSUS servers (local and replica) (local updates vs updates from internet) and if an user of such group is in the office they get updates from the local server and if he is in the field get the updates from the replica server? I know GPO's can have precedence set to the OU, but do they work like a trigger or something that tells them to go to the next GPO.
Thanks in advance