GP for SUS Updates doesn't work

[David Reed]

Hello,

I have Windows 2000 Servers with AD installed. I have a GP for an
Administration (NOT "Administrators") group of computers. The GP seems to
be set correctly, and is applied to the Group which contains the computers I
want it applied to.

However, the policy doesn't seem to "activate", even though it does appear
to be set correctly.

My users all get a little "globe" in the taskbar to do automatic updates
(from our SUS Server)...

I want those updates to all push out and automatically restart when the
computer isn't busy, say, 4am.

I read somewhere that the policy won't work if the user who logs in is
either
1. Logged into the domain, rather than locally (or)
2. The logged in user is a member of the ADMINISTRATORS group, not Power
Users

Can anyone confirm this for me?

Also, if true, is there a way to "fix" this so that the policy DOES take
effect, preferably at about 4am when no one is actually logged in?

Thanks,

David

 

[Robert R Kircher, Jr.]

Hello,

I have Windows 2000 Servers with AD installed. I have a GP for an
Administration (NOT "Administrators") group of computers. The GP
seems to be set correctly, and is applied to the Group which contains
the computers I want it applied to.

However, the policy doesn't seem to "activate", even though it does
appear to be set correctly.

My users all get a little "globe" in the taskbar to do automatic
updates (from our SUS Server)...

I want those updates to all push out and automatically restart when
the computer isn't busy, say, 4am.

I read somewhere that the policy won't work if the user who logs in is
either
1. Logged into the domain, rather than locally (or)
2. The logged in user is a member of the ADMINISTRATORS group, not
Power Users

Can anyone confirm this for me?

Also, if true, is there a way to "fix" this so that the policy DOES
take effect, preferably at about 4am when no one is actually logged
in?

Thanks,

David

Both the items you listed are incorrect. Look over the Policies for SUS in
you GPO and make sure that the Configure Automatic Updates policy is enabled
and set to 4-Auto download and schedule the install.

Also verify that you have the correct URL entered for you SUS server. I
chased a problem for a day once until I careful checked the URL and found
one letter missing... ARRRGH

One way to verify if you PC are actually using the GPO setting is by going
to the Auto Update config dialog page on the client and seeing if everything
is grayed out. If so then your setting are coming from the GPO.

 

[David Reed]

Hi Rob,

I wrote this quickly this morning, so forgive me it if was unclear...

I know it's downloading, I know it is pulling the updates from our SUS
server, everything works fine, EXCEPT

That the updates aren't applying automatically, in the middle of the night,
and rebooting...instead, the "globe" appears in the taskbar, and when the
user clicks on it and installs the updates, then it reboots...but I want
them to AUTOMATICALLY install during the overnight hours (4am is what it's
scheduled for), and AUTOMATICALLY install ALL APPROVED UPDATES, and
AUTOMATICALLY reboot if necessary...even if there is no user actually logged
on to the computer at 4am.

Does this help?

David