Auto Update Via Group Policy?

[Ben Blackmore]

Hi,

I've installed Software Updates Services on a Windows 2000 Server PC,
configured it all, and syncronised it with the microsoft update server. I
now want to configure my client PCs to be updates via the group policy. So I
have set up a test group, with a test PC. I've loaded the group policy
editor in active directory, gone to computer configuration -> administrative
templates, and added the wuau.adm template. I've configured the settings to
auto install and auto update everyday at 9am, its set not to auto reboot,
and to wait 1 min after logon for missed updates. I've then logged on as the
test PC, but nothing happens, no updates or anything. I know the policy is
being applied, as I set up a wallpaper, so I would be able to see that the
policy was be applied as the user logged on.

Anyone have any ideas?

Cheers

Ben

 

[Jay]

Hi Ben,

Unfortunately, I don't have an answer for you, actually I
have a similar problem.

What I wanted to ask was this, how did you setup the
client to reboot 1 minute after system startup? I can
see how it's done using regedit and have created the key.
But I was kind of hoping to do this centrally rather than
a registry key on each machine. In the manual, it shows
the group policy and 4 options under it, configure auto
updates, specify intranet..., Reschedule Auto... and No
auto Restart. How do I get these into the group policy?

Thought i'd mail you as you've obviously done it!

Jay

-----Original Message-----
Hi,

I've installed Software Updates Services on a Windows 2000 Server PC,
configured it all, and syncronised it with the microsoft update server. I
now want to configure my client PCs to be updates via the group policy. So I
have set up a test group, with a test PC. I've loaded the group policy
editor in active directory, gone to computer

configuration -> administrative

 

[Ben Blackmore]

I got it off the microsoft white paper, but there is a nice graphical
version here
http://www.bris.ac.uk/is/services/computers/operatingsystems/sus/configuring.html
That explains how it should be done, however I have yet to get it to work,
as its not implimenting the actual update policy! No updates are being
downloaded or installed, and I can't see why!

Ben

 

[Guest]

I've got mine kind of working with XP only, as yet no joy
with 2000 clients. Not sure what i've done differently
to you though, sounds very similar.

 

[Guest]

Hi Ben,

How are you doing with yours now? I've got mine to the
stage where it downloads the updates from the SUS server,
but it doesn't ever seem to install them or restart the
machine. Any ideas?

Jay

 

[Ben Blackmore]

Not a lot further I'm afraid! I've setup a new machine, clean install of
Win2000 (with sp4 intigrated). Have added the user to the test group, and
also the computer to the group. Setup auto install in the group policy,
logged on, and nothing happened!

Can you provide any details on what you did to get it working?

Cheers
Ben

 

[J.H]

My scenario that I have IIS installed, SUS installed and ****URL Scan
installed with IIS lockdown. They were probably the reason making SUS
server rejecting to push the updates to SUS client.

I did:
- Uninstall SUS server
- Uninstall URL Scan, IIS lockdown tool
(DO NOT EVER RUN URL SCAN, IIS LOCKDOWN, I MEAN EVERRRR)
- Uninstall IIS
- Delete Inetpub folder
- Restart computer, reinstall IIS, SUS ONLY
- Configure SUS client by local policy/domain policy to point to SUS server
- Download template at:
http://www.microsoft.com/downloads/...EA-D274-42E6-8025-8C667B4C94E9&displaylang=en
- Working !!!! ,,,so far, the SUS client only get the notification to
install SP4
TIPS --> Unapproved SP4,, other hotfixes will be available for client to
update
TIPS --> Approved SP4, other hotfixes will not be avaiable BUT SP4 only !!
GOOD LUCK !!
--> Every thing is working great !!!

These info. might help you guys

J

 

[Daniel VanMeter]

If you go to the automatic updates icon on the PC, XP and 2000 have different locations, are all of the options greyed out? If so, then the group policy did take affect.

 

[J.H]

Hi Daniel,

It is not needed to be grayed out !! Perhaps you configure
Administrative Templates\Windows Components\Configure Automatic Updates

Otherwise it is an options in Control Panel to let users configure it by
themselves
But for administrative purpose, you might need to configure the policy as
above
to do it as you are an administrator wish it how to be done !!

If the 'earth' update symbols appear in the right corner,
check your computer network connection in the command prompt
c:\netstat -na

to see if there is an IP of SUS server with port 80 and 110
if it is ,,, it is working properly

You still need to restart after configure the policy to take effect as I
experienced

J

If you go to the automatic updates icon on the PC, XP and 2000 have

different locations, are all of the options greyed out? If so, then the
group policy did take affect.

 

[Alex Anderson]

Jay,

Do remember that those SUS GPO's are for workstation objects only!! Set
up a OU and move your computer objects to it, restart your workstation(s)
then the policy will take affect.

Alex Anderson