GPO Not Working - Windows Update from SUS Server

[David Reed]

Hello...I created my first Group Policy, which I have applied to a group
called "Administration". These are basic office-type desktops. I created
the policy, and the following parameters are set:

Configure Automatic Updates: Enabled
Option #4 - Auto download and install updates, Every Day, 05:00
Specificy intranet Microsoft update service loacation: Enabled
SUS Server: SUSSERVER and Intranet Statistics Server: http://susserver
Reschedule Automatic Updaates schedule installations: Enabled
Wait after system startup (5) minutes
No auto-restart for scheduled Automatic Updates installations: Disabled

I have checked and this policy is applied to all the groups under this
group. (Open the GPO, click LINKS tab, and FIND NOW button, and below it
shows the ADMINISTRATION group and all its sub-groups) However, it doesn't
seem to actually DO anything...I must have missed something somewhere...

Does anyone have ideas on what I might have missed, why this policy doesn't
actually seem to be "turned on"?

Thanks,

David

 

[Ken Schaefer]

a) Did you check the registries of the client machines to see if the GPO has
been applied?
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

b) If you suspect that the GPO is not being applied, did you run gpresult
(from a command line) on the client machines to see if the GPO object has
some kind of problem (eg access denied due to security filtering)

c) Did you check the Event Logs on the clients to see if any errors occured
in applying the group policy? You can call gpupdate (again from a command
line) to force a GPO refresh.

d) Did you read the SUS deployment whitepaper? That would tell you where you
should be looking when troubleshooting...

Cheers
Ken

: Hello...I created my first Group Policy, which I have applied to a group
: called "Administration". These are basic office-type desktops. I
created
: the policy, and the following parameters are set:
:
: Configure Automatic Updates: Enabled
: Option #4 - Auto download and install updates, Every Day, 05:00
: Specificy intranet Microsoft update service loacation: Enabled
: SUS Server: SUSSERVER and Intranet Statistics Server:
http://susserver
: Reschedule Automatic Updaates schedule installations: Enabled
: Wait after system startup (5) minutes
: No auto-restart for scheduled Automatic Updates installations: Disabled
:
: I have checked and this policy is applied to all the groups under this
: group. (Open the GPO, click LINKS tab, and FIND NOW button, and below it
: shows the ADMINISTRATION group and all its sub-groups) However, it doesn't
: seem to actually DO anything...I must have missed something somewhere...
:
: Does anyone have ideas on what I might have missed, why this policy
doesn't
: actually seem to be "turned on"?
:
: Thanks,
:
: David
:
: --
: David Reed
: Nework Administrator
: (e-mail address removed)
:
: