Problem with SUS policy

  • Thread starter Thread starter Dende
  • Start date Start date
D

Dende

Hi, I have some problem with SUS policy on client side.
I have set on the server in the policy (Computer Configuration section,
Administrative Templates, Windows Components, Windows Update) the
appropriate configuration. When a client join the active directory
domain for the first time, the windows update policy are set correctly
but if after I modify this policy on the client, this client never
takes the policy set on the server.
Who can help me?

Thanks and sorry for my bad english
 
Dende,


Remember that a local policy will override a domain policy. So, if you make
a change there, the domain policy will not take effect. You shoudl do this
at the Domain or OU level and leave it as such.
 
Ryan,

Maybe I am missing something. But the pecking order is local, Site, Domain,
OU.....

So, in a situation where there is a common setting that has conflicting
settings the Site-based GPO should override a local-based GPO. And, a
Domain-based GPO should override a Site-based GPO etc. etc. etc.

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
 
Cary Shultz said:
Ryan,

Maybe I am missing something. But the pecking order is local, Site, Domain,
OU.....

So, in a situation where there is a common setting that has conflicting
settings the Site-based GPO should override a local-based GPO. And, a
Domain-based GPO should override a Site-based GPO etc. etc. etc.

Yes, I understand but if I set a policy domain and after i change this
policy on a local pc, the policy domain don't override the local policy...
 
Actually, I should be a little bit more specific in my response. Sending
you off to the SUS news group is kinda chicken on my part.

If there is a local policy that has a setting conflict with a Domain-level
policy and the local policy is 'winning' then I would suggest that the
Domain-level GPO is not being applied. Well, that would be the quick
assessment.

What have you done in the way of checking to see what is going on here?
There could be several things.

One of them is that the client PC is authenticating against a DC and that DC
is not replicating with the others. Probably not the case here but it is a
possibility. Have you use GPOTool or GPResult? If this is a WIN2003
environment have you looked at RSoP? That is a really neat tool ( and I
have played with it only once or twice ).

--
Cary W. Shultz
Roanoke, VA 24012
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
 
Back
Top