Windows Server - Group policy for WSUS

Asked By Bharathiraja
25-Aug-09 11:42 AM
Hi Guys,

How to create a policy for WSUS service.Plz reply fast........
Active Directory
(1)
Windows Update
(1)
GPOs
(1)
ComputersTo
(1)
PolicyWhen
(1)
Maillist
(1)
  Florian Frommherz [MVP] replied...
25-Aug-09 12:00 PM
Howdie!

Bharathiraja schrieb:

You can use the Windows Update GPOs for WSUS as well. You need to define
the "internal Windows Update location" GP:

CompConf\[Policies]\Administrative Templates\Windows Components\Windows
Update - "Specify intranet Microsoft update service location". You put
in the http address to your WSUS server, like

http://wsus-internal or http://10.1.1.10

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
  Ace Fekay [MCT] replied...
25-Aug-09 12:09 PM
If you are looking for a step-by step, there is a lot involved. You would
have to first decide how to target the accounts, then in WSUS, create target
groups (laptops, desktops, servers, etc), create a separate GPO for each,
and a separate OU for each, and apply for example, the "Desktop WSUS GPO" to
the Desktop OU, etc. In each GPO you would customize times and the target
group name that you created in the WSUS console where you specify based on
the target groups.

Here is more information on how to do it.

Step 5: Update and Configure the Client ComputersTo configure Automatic
Updates, create a new Group Policy object (GPO) for WSUS settings and then
link that GPO on the domain level. ...
http://technet.microsoft.com/en-us/library/cc720520(WS.10).aspx

Configure Automatic Updates by Using Group PolicyWhen you configure the
Group Policy settings for WSUS, use a Group Policy object (GPO) linked to an
Active Directory container appropriate for your ...
http://technet.microsoft.com/en-us/library/cc720539(WS.10).aspx

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Create New Account
help
GPO's Not Replicating Windows Server I am having a great deal of trouble getting GPs to pull over the Profile: http: / / forums.techarena.in / members / 169993.htm View this thread: http: / / forums.techarena.in / active-directory / 1288776.htm http: / / forums.techarena.in Windows Server Active Directory Discussions Windows Server 2008 R2 (1) Windows Server 2008 (1) Active Directory (1) NetBIOS (1) ProcessingTimeInMilliseconds (1) EventRecordID (1) DNSLint (1) FRSUtil
Is it possible to decrypt EFS files without backup certificate Windows Server A PC had Vista installed and one folder was encrypted by OS. This folder some thousand or so files. Then Vista was reinstalled, with most old system files (including "Windows", folder left intact on HDD. Is it possible to get files from encrypted folder somehow decrypted under newly installed copy of Windows? Username and password for Windows account used to encrypt folder are known. Utilities like Elsomsoft's EFS recovery could not not others. (microsoft.public.security, microsoft.public.win2000.security, microsoft.public.security.homeusers, microsoft.public.windows.file_system, microsoft.public.windows.vista.security) Security Discussions Windows XP (1) Windows Server 2003 (1) Windows Server 2008 (1) Windows Server (1) Windows 7 (1) Linux (1
Clients do not install updates Windows Server I am new to using WSUS, and would really appreciate if someone would help I do not see any errors in the log. I have changed the settings for windows installer, and windows update in my global policy for automatic restarts, and automatic installs. I am not sure if I have a misconfiguration with my Update Server, or some type of policy setting that I need to change. Please Help 2009 Machine} 2009-12-05 05:41:42:954 1728 8dc Misc Validating signature for C: \ WINDOWS \ SoftwareDistribution \ SelfUpdate \ Default \ wuident.cab: 2009-12-05 05:41:42:954 1728 8dc Misc Yes 2009-12-05 05:41:42:969 1728 8dc Misc Validating signature for C: \ WINDOWS \ SoftwareDistribution \ SelfUpdate \ Default \ wuident.cab: 2009-12-05 05:41:42:969 1728 8dc Misc Yes 2009-12-05 05:41:42:985 1728 8dc Misc Validating signature for C: \ WINDOWS \ SoftwareDistribution \ SelfUpdate \ Default \ wsus3setup.cab: 2009-12-05 05:41:42:985 1728 8dc Misc
931125 endless loop Windows Server Our WSUS server got this update last night must of been a minor update to it or something. Other Updates Update for Root Certificates [May 2009] (KB931125) This item updates the list of root certificates on to restart your computer. Once you have installed this item, it cannot be removed. This update was already approved. The users get a shield for this update and then after install they get another shield for: Update for Root Certificates Then after this is installed they get the shield again for Update for Root Certificates [September 2009] (KB931125) This then is in a never ending loop. Has
No inbound emails from outside domain Windows Server SBS 2003 Premium on Dell PE2800 server, with Symantec Corp. AV ver. 12.5 Crane Maintenance Trust, Inc. a conservation non-profit (501 (c)(3)) organization Wood River, NE Windows Server SBS Discussions Microsoft.WEBS.BPA.Engine.ExecutionModule.Execute (1) Microsoft.WEBS.BPA.Engine.DataCollector services.msc. The SMTP Virtual Server is still not available. Here is the IPCONFIG / all Windows IP Configuration Host Name . . . . . . . . . . . . : wct Primary Dns Suffix . . . . . . . : whooper.local Node Type . . . . . . . . . . . . : Hybrid IP Routing not allowing you to see the virtual server? Since the SMTP process is actually a Windows process (IIS) that Exchange 2003 uses (Ex2007 is way different having its own internal process GFI? Do you remember anything else that could have occured before all of this occured? Windows update, hotfix, etc? Did you install Live Communications Server 2003? Eventid.net indicated http: / / support.microsoft installed in the few days prior to this happening is KB915597 (WinDefender updates) and KB907747 (Update to Exchange IMF). I do not have LCS. DHCP is running, but . . . it shows "Cannot Diagnosis Performing initial setup: * Verifying that the local machine wct, is a DC. * Connecting to directory service on server wct. [wct] Directory Binding Error 1726: The remote procedure call failed. This