autoupdate clients

J

jason

I want my clients (with power user privileges) to
automatically download and install patches on the windows
2000 pro sp4 workstations. I'm currently installing SUS
and want to install the patches. I don't want to give
administrative privileges to the users.

No active directory, actually a nt4 pdc.

i'll configure my clients either with the ADM file or via
registry, no problem with this.

Is that possible?

thanx a lot.
 
T

Torgeir Bakken \(MVP\)

jason said:
I want my clients (with power user privileges) to
automatically download and install patches on the windows
2000 pro sp4 workstations. I'm currently installing SUS
and want to install the patches. I don't want to give
administrative privileges to the users.
Hi

Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsser...t.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm


Back to your question:

You need to set AUOptions to 4 (because that is the only setting that
will make SUS install updates even for non-admin users).


Below is an excerpt from the "Software Update Services Deployment
White Paper":

</quote>
AUOptions

Range = 2|3|4.
2 = notify of download and installation
3 = automatically download and notify of installation
4 = automatic download and scheduled installation.

All options notify the local administrator.
</quote>


See the chapter "Configuring the Automatic Updates client software"
in the white paper for more details.

Download link for "Software Update Services Deployment White Paper"
(SUS_Deployguide_sp1.doc) can be found under "More Information" at
http://www.microsoft.com/windowsserversystem/sus/default.mspx
 
J

Jason Hall [MSFT]

--------------------
Sender: "jason" <[email protected]>
Subject: autoupdate clients
Date: Wed, 5 May 2004 10:21:31 -0700
Lines: 14
I want my clients (with power user privileges) to
automatically download and install patches on the windows
2000 pro sp4 workstations. I'm currently installing SUS
and want to install the patches. I don't want to give
administrative privileges to the users.

No active directory, actually a nt4 pdc.

i'll configure my clients either with the ADM file or via
registry, no problem with this.

Is that possible?

thanx a lot.
--------------------
Of course, with Group Policy, it would be a snap.
Here is the registry keys that control how a 2K/XP machine deals with SUS
updates.....

=====================================

HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
"WUServer"=http://austinm3-w2k
Sets the MSUS server by HTTP name. String value.

"WUStatusServer"=http://austinm3-w2k
Sets the MSUS intranet statistics server by HTTP name. String value.

======================================

HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

"NoAutoUpdate"=dword:00000000
Dword Value. 0 = Automatic Updates client is enabled (default), 1 =
Automatic Updates client is disabled.

"AUOptions"=dword:00000004
Value is either 2, 3, or 4. 2 = Notify for download and install, 3 =
Automatically download and notify for install,
4 = Automatically download and schedule the install. All options notify
the local administrator. Dword value.

"ScheduledInstallDay"=dword:00000000
Range is 0, 1, 2, 3, 4, 5, 6, 7. 0 = Everyday, 1 through 7 = day of the
week, Sunday=1 … Saturday=7. Dword value

"ScheduledInstallTime"=dword:00000014
Value is in 24-hour format (0-23). Dword value. This clients time not
GMT time.

"UseWUServer"=dword:00000001
Set this value to 1 to enable the Automatic Updates client to use the
Microsoft Software Update Services server as
specified in WUServer. Dword value.

"RescheduleWaitTime"=dword:00000005
(new to SP1) Range is 1 to 60. Number of minutes to wait after system is
started up to install updates that were missed at the
scheduled install time because the user had turned the computer off.

"NoAutoRebootWithLoggedOnUsers"=dword:00000000
(new to SP1) if not configured or set to 0 defaults to old behavior of
giving the user 5 minutes before restarting the system
otherwise in short prevents the reboot from occurring after 5 minutes
when someone is logged on.

=========================================

HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

"NoAutoUpdate"=dword:00000000
Dword Value. 0 = Automatic Updates client is enabled (default), 1 =
Automatic Updates client is disabled.

"AUOptions"=dword:00000004
Value is either 2, 3, or 4. 2 = Notify for download and install, 3 =
Automatically download and notify for install,
4 = Automatically download and schedule the install. All options notify
the local administrator. Dword value.

"ScheduledInstallDay"=dword:00000000
Range is 0, 1, 2, 3, 4, 5, 6, 7. 0 = Everyday, 1 through 7 = day of the
week, Sunday=1 … Saturday=7. Dword value

"ScheduledInstallTime"=dword:00000014
Value is in 24-hour format (0-23). Dword value. This clients time not
GMT time.

"UseWUServer"=dword:00000001
Set this value to 1 to enable the Automatic Updates client to use the
Microsoft Software Update Services server
as specified in WUServer. Dword value.

"RescheduleWaitTime"=dword:00000005
(new to SP1) Range is 1 to 60. Number of minutes to wait after system is
started up to install updates that were missed
at the scheduled install time because the user had turned the computer
off.

"NoAutoRebootWithLoggedOnUsers"=dword:00000000
(new to SP1) if not configured or set to 0 defaults to old behavior of
giving the user 5 minutes before restarting the system
otherwise in short prevents the reboot from occurring after 5 minutes
when someone is logged on.


--
~~ JASON HALL ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
C

cwrichards

Will these reg entries work with windowsupdate.com, or just a loca
SUS?

Thanks!

--
~~ JASON HALL ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses t
this
message are best directed to the newsgroup/thread from which they
originated. [/B


-
cwrichard
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top