how to not applying servers platform to run updates

[m]

Hello,

I just implemented a Service Update Server for the
security update purposes for my company. This update run
fine on the first time, but I scheduled this to run again
yesterday, some server are installed fine, but
workstations seem like didn't installed automatically.
The workstation just downloaded the updates from the SUS
but didn't install, is waiting for the users to select
install before it going to install the security patches.

The configurations in my Group Policy under the Computer
Setting\Administrative Template\Windows Update\
Configure Automatic Updates is Enabled with option # 4
Specify intranet MS Update Service Location is Enabled
Reschedule Automatic Updates Scheduled Installations is
Enabled with Wait 1 minutes after the system startup
No Auto-restart for scheduled Automatic Updates
Installations is Enabled

But the last installation went on fine, and the users did
restart the system by themselve. Also, for some
workstation that didn't turn on as the schedule for the
update last time, didn't install the application as they
suppose to wait for 1 minute if they miss the schedule.

How can I eliminate the update to run on the servers and
the Domain controller?

This update also installed the updates on the SUS server
itself. How can I eliminate this?

I want to run the security update manually on the servers'
platform.

Greatly appreciates for all the helps!

M

 

[Danny Sanders]

How can I eliminate the update to run on the servers and

the Domain controller?

This update also installed the updates on the SUS server
itself. How can I eliminate this?

Move all client computers into an OU. Do not add Servers and SUS server to
this OU. Remove SUS policy from the default domain policy and apply SUS
policy to this OU.

hth
DDS W 2k MVP MCSE