Windows Server - Wsus Script
Asked By Joe C
17-Nov-09 10:45 AM
Hello,
I have a server 2003 box with Wsus 3.0 Sp2 on it. This update server is
tied to our domain though GP. However we do a serious amount of
computer prepping for other people. What I am looking for is a way for
me to use our current update server, on computers that are not part and
will not be part of our domain. Maybe some sort of script that I can
edit in my server's IP and have it force update/reboot the client
computers. I Understand I can edit the local policy, but I was hoping
for a one time thing, once the updates are applied the pc can then use
Microsoft's update site. Any help is appreciated.
Thanks!
Joe
AutoInstallMinorUpdates
(1)
Lawrence.Garvin
(1)
WUStatusServer
(1)
UseWUServer
(1)
ScheduledInstallTime
(1)
ScheduledInstallDay
(1)
WUServer
(1)
DetectionFrequency
(1)
Lawrence Garvin [MVP] replied to Joe C
it is really as simple as REG file which you can load from a USB key.
Define a target group on your WSUS Server to use for these systems and set
your approvals as desired. You might even consider setting expired deadlines
on that group to force immediate installations of all updates.
Then put this text in a REG key
======================================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
======================================
And put this text in another REG key to 'undo' the above and restore normal
AU functionality
======================================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
======================================
--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)
My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
for help in advance Vineet Cornelius Windows Server Update Services Discussions NoAutoRebootWithLoggedOnUsers (1) XP (1) AutoInstallMinorUpdates (1) Lawrence.Garvin (1) WUStatusServer (1) UseWUServer (1) ScheduledInstallTime (1) ScheduledInstallDay (1) More likely they are prompting an = admin = user all of this documented in the WSUS Deployment Guide in the section on configuring clients. - - Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA Principal / CTO, Onsite Technology Solutions, Houston, Texas Microsoft MVP Website: http: / / www.microsoft.com / wsus My MVP Profile: http: / / mvp.support.microsoft.com / profile / Lawrence.Garvin keywords: Want, to, Install, The, Updates, on, the, Client, without, user, interventio description: I have
please your advice Thank's Maisa Windows Server Update Services Discussions NoAutoRebootWithLoggedOnUsers (1) SyncServerUpdatesInternal (1) AutoInstallMinorUpdates (1) SimpleAuthWebService (1) WUStatusServer (1) UseWUServer (1) RebootRelaunchTimeout (1) ScheduledInstallTime (1) Ischa schrieb: Have a look in %windir% \ WindowsUpdate technologien / updateservices / default.mspx http: / / www.wsuswiki.com / Home After reading the Release Notes. . . . = TWICE = !! :-) - - Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP Principal / CTO, Onsite Technology Solutions, Houston onsitechsolutions.com; http: / / wsusinfo.onsitechsolutions.com My MVP Profile: http: / / mvp.support.microsoft.com / profile / Lawrence.Garvin Lawrence Garvin (MVP) schrieb: You are shure its enough, to read two times? ;-) Winfried - - http: / / www.microsoft
cannot find the file specified. Adao Windows Server Update Services Discussions NoAutoRebootWithLoggedOnUsers (1) GetAUSettingsRegistry (1) AutoInstallMinorUpdates (1) Lawrence.Garvin (1) WUStatusServer (1) UseWUServer (1) RebootRelaunchTimeout (1) RebootWarningTimeout (1) If the computer is a workgroup computer, not and assign the target group name using LOCAL policy on a non-domain (workgroup) machine. - - Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP Principal / CTO, Onsite Technology Solutions, Houston onsitechsolutions.com; http: / / wsusinfo.onsitechsolutions.com My MVP Profile: http: / / mvp.support.microsoft.com / profile / Lawrence.Garvin I assume you mean a local group policy setting? Is there a local group policy
WSUS Client detects 0 Updates Windows Server I saw the previous posting and replies from Lawrence Garvin. I tried the 7 steps solutions but the client still detects 0 updates. Since I 1) Windows Update (1) Publisher 2003 (1) Office 2003 (1) Word 2003 (1) DisableWindowsUpdateAccess (1) AutoInstallMinorUpdates (1) SimpleAuthWebService (1) So the WSUS server reports that the client still needs 70 updates software \ policies \ microsoft \ windows \ windowsupdate DisableWindowsUpdateAccess REG_DWORD 0x1 WUServer REG_SZ http: / / op-s-su-1 WUStatusServer REG_SZ http: / / op-s-su-1 TargetGroupEnabled REG_DWORD 0x1 TargetGroup REG_SZ test HKEY_LOCAL_MACHINE \ software \ policies REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE \ software \ policies \ microsoft \ windows \ windowsupdate \ AU NoAutoUpdate REG_DWORD 0x0 AutoInstallMinorUpdates REG_DWORD 0x1 RebootRelaunchTimeoutEnabled REG_DWORD 0x1 RebootRelaunchTimeout REG_DWORD 0x5 NoAUShutdownOption REG_DWORD 0x1 NoAUAsDefaultShutdownOption REG_DWORD 0x1 UseWUServer not in use Checking Connection to WSUS / SUS Server WUServer = http: / / op-s-su-1 WUStatusServer = http: / / op-s-su-1 UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS Connection to server. . . . . . . . . . . . . . . . . . PASS SelfUpdate folder not in use Checking Connection to WSUS / SUS Server WUServer = http: / / op-s-su-1 WUStatusServer = http: / / op-s-su-1 UseWuServer is enabled. . . . . . . . . . . . . . . . . PASS ! REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE software \ policies \ microsoft \ windows \ windowsupdate DisableWindowsUpdateAccess REG_DWORD 0x1 WUServer REG_SZ http: / / op-s-su-1 WUStatusServer REG_SZ http: / / op-s-su-1 TargetGroupEnabled REG_DWORD 0x1 TargetGroup REG_SZ Pilot1 HKEY_LOCAL_MACHINE \ software \ policies