SUS Group Policy

[Guest]

I've created a group policy in Active Directory Users and Computers for automatic updates to pull from my SUS server. It doesn't seem like the group policy is pushing through to my computers. Can someone assist?

 

[Mark Scott]

Hi Jess.

Where abouts in the structure have you placed the policy? I would reccomend
creating a new policy in the domain or in a high up OU and give it "no
override".

Secondly, what versions are your clients? If they are pre 2000 sp3 or XP
sp1 then you need to install the automatic updates client. - create a new
Software Install policy and point it to the update client MSI file.

Lastly, have you downloaded and approved the updates in question?

Regards

Mark

I've created a group policy in Active Directory Users and Computers for

automatic updates to pull from my SUS server. It doesn't seem like the
group policy is pushing through to my computers. Can someone assist?

 

[Mark Scott]

No, as long as you don;t have anything over-riding it further down the
policy chain, THe policies are applied in the following order:

Local
Site
Domain
OU structure.

have you tried
secedit /refresh policy machine_policy enforce or the xp equivelent of
gpupdate on the required machines?

If you want to see resultant policy, try installing the 2003 adminpack on an
XP workstation or take a look at FAZAM www.fullarmor.com

Regards

Mark

Mark,

Yes all my machines are W2K sp4 or WXP SP1. I've already downloaded and

approved all the updates. And the group policy was placed at the domain
level. Does it need to be at the top of the list as far as group policies
go?