How-To Configure Group Policy on an Organizational Unit

[David Reed]

Hi Everyone,

My first post here. I have configured an Organizational Unit of
Administrative Support computers on our Active Directory domain. I want to
configure a Group Policy for that OU to automatically push out, install, and
reboot any approved MS Windows patches.

I haven't done GPs before...I could use some guidance.

Also, it's CRITICALLY important that the GP does NOT apply to other OU's or
"computers". I'm sure that's always the case, but just wanted to state so.


Anyone have any links or papers on doing GP's for the first time, and how to
do this?

Thanks,

David

 

[Tim Hines [MSFT]]

You may want to consider using SUS. Many administrators have been using
this to deploy updates. Take a look at
http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[David Reed]

Sorry, my failure to put that in.

I AM using SUS, what I want to know is how to configure a GP that will get
the OU to connect to the SUS and do the updates, install, and reboot.

Thanks,

David

 

[Dan B]

David,

Here is what to do....

Right click the OU you want to apply the policy to, go to properties and
group policy tab. Click add. Go to Computer Configuration, Administrative
Templates, Window Components, and Windows Update.

Enable the Configure Automatic Updates policy and then under Specify
intranet Microsoft update service location, put in the URL of your server
you have SUS set up on. All client computers will need to reboot to have
the policy apply.

Dan, MCZEE 2000

 

[David Reed]

Hi Dan,

I'm not sure what I'm doing wrong. When I follow the instructions in
paragraph one, I get as far as the Windows Components option, then there is
no "Windows Update" option.

Instead I find four sub-options:

+Windows Components
+Netmeeting
+Internet Explorer
+Task Scheduler
+Windows Installer
+System
+Logon
+Disk Quotas
+DNS Client
+Group Policy
+Windows File Protection
+Network
+Offline File
+Network and Dialup Connections
Printers

I'm sure I'm just missing something obvious, but this IS my first try at
using GP's, so please bear with me.

David

 

[ms]

I believe you to load the wuau.adm file. Here is the tech article.

http://support.microsoft.com/default.aspx?scid=kb;en-us;328010

 

[Tim Hines [MSFT]]

You need to add the wuau.adm file to the policy. Take a look at 328010 How
to Configure Automatic Updates by Using Group Policy or Registry
http://support.microsoft.com/?id=328010

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[David Reed]

Another KB article. I'm shocked.

I'm going to go beat my head against the wall.

Is there a MS KB article on THAT???

Go ahead, tell me there is, you'll make my day.

David

 

[ms]

Did you not read the EULA? I'm trying to roll out sp4 via GPO also and
then use SUS to deploy patches after that but I'm having trouble.
Apparently though, SUS will support service packs starting with SP4 at the
end of the month but I don't know whether that is true or not so I don't
know whether to wait or not.

What I would like is for MS to update their search engine as if you don't
know the search phrase it "likes" you can search for a while to find what
you really need.

p.s - I'm searching right now for that KB article!

 

[David Reed]

Well, I think I got the policy applied properly, and I have a smallish group
of my users who are my victims...errr...I mean...unwitting volunteers, to
see if this works.

SP's through SUS, huh? Wow, wouldn't THAT be great!

They should have an SUS type thing for MS Office 2k too. Wouldn't THAT be
handy?

David

 

[Torgeir Bakken (MVP)]

Well, I think I got the policy applied properly, and I have a smallish group
of my users who are my victims...errr...I mean...unwitting volunteers, to
see if this works.

SP's through SUS, huh? Wow, wouldn't THAT be great!

They should have an SUS type thing for MS Office 2k too. Wouldn't THAT be
handy?

Hi

If I'm not mistaken, the next version of SUS will handle Office updates as well
(at least the security part of it)...

 

[David Reed]

Your joking?

Wow, wouldn't that be great.

Now THAT is something to look forward too!!!

David

 

[Torgeir Bakken (MVP)]

Your joking?

Wow, wouldn't that be great.

Now THAT is something to look forward too!!!

http://groups.google.com/[email protected]