Windows Update and Group Policy

[Guest]

Is it possible to apply Windows Updates to client machines via Group Policy?
If so, how?

Thanks,

Mike

 

[Mark Renoden [MSFT]]

Hi Mike

On Windows XP (and I'm pretty sure recent service packs of Windows 2000),
you can specify update settings via Computer Configuration -> Administrative
Templates -> Windows Components -> Windows update.

If you want to control the specific updates applied to clients, you'll need
to set up a SUS server in your environment and use the policy settings to
specify the SUS server as the source of updates.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Mark,

Thanks for taking the time. I will check it out. It sounds like a "SUS"
server houses the update files and the clients connect to it for the updates
rather than Microsoft's site. Is that correct? What does "SUS" stand for,
and can any server do it?

Thanks,

Mike

Hi Mike

On Windows XP (and I'm pretty sure recent service packs of Windows 2000),
you can specify update settings via Computer Configuration -> Administrative
Templates -> Windows Components -> Windows update.

If you want to control the specific updates applied to clients, you'll need
to set up a SUS server in your environment and use the policy settings to
specify the SUS server as the source of updates.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Is it possible to apply Windows Updates to client machines via Group
Policy?
If so, how?

Thanks,

Mike

 

[Mark Renoden [MSFT]]

Hi Mike

SUS is Software Update Services. It attaches to Windows Update and pulls
updates locally. Administrators can then select which updates are approved
to distribution to clients and you can use group policy to say where the SUS
server is, when the client checks for updates and how the updates are
installed (user interaction or not).

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Mark,

Thanks for taking the time. I will check it out. It sounds like a "SUS"
server houses the update files and the clients connect to it for the
updates
rather than Microsoft's site. Is that correct? What does "SUS" stand
for,
and can any server do it?

Thanks,

Mike

Hi Mike

On Windows XP (and I'm pretty sure recent service packs of Windows 2000),
you can specify update settings via Computer Configuration ->
Administrative
Templates -> Windows Components -> Windows update.

If you want to control the specific updates applied to clients, you'll
need
to set up a SUS server in your environment and use the policy settings to
specify the SUS server as the source of updates.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no
rights.

Is it possible to apply Windows Updates to client machines via Group
Policy?
If so, how?

Thanks,

Mike

 

[Rick]

Mark, if you set updates to download and install automatically, will
SP2 be downloaded and installed with this option?

 

[Mark Renoden [MSFT]]

Hi Rick

I haven't looked at it in a little while but I believe you can deploy SP2
for XP using SUS.

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[lforbes]

Hi Rick

I haven't looked at it in a little while but I believe you can
deploy SP2
for XP using SUS.

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email
address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and
confers no rights.

Mark, if you set updates to download and install automatically, will
SP2 be downloaded and installed with this option?

 >>Hi Mike
 >>
 >>SUS is Software Update Services. It attaches to
Windows Update and pulls
 >>updates locally. Administrators can then select which
updates are
 >>approved
 >>to distribution to clients and you can use group
policy to say where the
 >>SUS
 >>server is, when the client checks for updates and how
the updates are
 >>installed (user interaction or not).
 >>
 >>HTH

Hi,

First of all, I recommend installing WUS if you are running Windows
2003 Server. It is the newer version of SUS. It is in Beta but is more
stable in Beta than SUS is regular. I use both and Love them.

WUS lets you specify what updates you want to download, SUS downloads
them all and lets you approve them (but they are sitting on your
server).

All my machines update via WUS at 2am daily. I am pretty impressed
with it so far.

Cheers,

Lara

 

[Rick]

But if I have automatic updates set in a GPO they will download
automatically? Also as of April 12th is sp2 going to be installed by
default even if you have the reg hack to block it?

 

[lforbes]

But if I have automatic updates set in a GPO they will
download
automatically? Also as of April 12th is sp2 going to be
installed by
default even if you have the reg hack to block it?

Hi,

WUS and SUS lets you decide which updates to deploy, including Service
Packs. I have set my service packs to download to my server and then
"detect only". I have NOT set SP2 up to deploy automatically. I
prefer to do it manually to make sure it deploys correctly.

Your updates with WUS and SUS are downloaded to your server. Then
using the GPO you decide whether to detect, auto download from Your
server or autodownload from your server and install automatically.

Eg. I have my clients with auto download from my WUS server and
install. However, my servers are set to autodownload only and I
install when I can restart them.

Cheers,

Lara