Lawrence Garvin [MVP] replied to Joe C
17-Nov-09 11:03 AM

it is really as simple as REG file which you can load from a USB key.
Define a target group on your WSUS Server to use for these systems and set
your approvals as desired. You might even consider setting expired deadlines
on that group to force immediate installations of all updates.
Then put this text in a REG key
======================================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
======================================
And put this text in another REG key to 'undo' the above and restore normal
AU functionality
======================================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
======================================
--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)
My Blog: http://onsitechsolutions.spaces.live.com
Microsoft WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin