WSUS
Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: WSUS

  1. #1
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683

    WSUS

    Hey there all

    I have setup a WSUS server in the office. Was really bored

    Now in order to point the machines to it I have to edit group policy on the workstation?

    How do I do it from the server to deploy the settings to the domain? I assume a company with 100+ users cant go to every machine to edit their GP.

    The head technichan has an MCSE and he doesnt know how to do it?

    Any help appreciated.
    Last edited by Cider; June 11th, 2008 at 09:28 AM.
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

  2. #2
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  3. #3
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683
    Hi there

    Thanks for that Sirdice.

    I am busy downloading Group policy management console for the server

    I downloaded the tutorial from m$ on setting it up but couldnt find Group policy management console in Start > admin tools >

    Thanks for the link though.
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

  4. #4
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    Click on start --> run and type "mmc" (less the quotes)

    That will pull up the microsoft management console. From there click on file and then add/remove snap in. choose the snapins you want. You should see group policy editor or console in there.

    BTW: You can create a mmc console and save it for future use. It's nice to have all the tools you need to use in one snapin all the time.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  5. #5
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Start -> Run... gpedit.msc

    If it's not there copy it over from a server. It's a MMC plugin.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  6. #6
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683
    Yes however isnt gpedfit.msc concerning the machine and not the domain ?

    I.E If I edit which server it must pull updates from in windows update template wont it just be for that PC, I really want to edit all the computers on the domain to use the settings I want to.

    The DC isnt the on the same server which the WSUS is on. Got two servers running here.
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

  7. #7
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Oh right.. Just starting gpedit.msc will start the editor with the focus set to the local computer.

    Start it like phish said then you're able to set the focus to the domain..

    The file gpedit.msc is the actual MMC group policy snap-in.. So if it's not on your workstation just copy it over from a server.

    Or this way:
    http://support.microsoft.com/kb/221930
    Last edited by SirDice; June 11th, 2008 at 03:00 PM.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  8. #8
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683
    OK well I have gone and "MMC" on the DC. I have edited all the options.

    Will this now edit all the workstations GP's when they log in?
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

  9. #9
    Some Assembly Required ShagDevil's Avatar
    Join Date
    Nov 2002
    Location
    New Jersey
    Posts
    718
    The head technichan has an MCSE and he doesnt know how to do it?
    That's pretty sad.

    The DC isnt the on the same server which the WSUS is on
    We have the exact same setup here. We have a DC & an App server (where WSUS runs).

    Will this now edit all the workstations GP's when they log in?
    So long as you edited the Group Policy on the DC, all the workstations will universally apply those settings.

    I have a couple questions. Is your WSUS server using SSL? If so, you'll need to create a certificate. Also, if you want to see if your workstations are applying Group Policy correctly, go to a workstation, start-> run->gpupdate

    On the same workstation, go to the control panel, select Windows Updates and see if the selections on this machine match what you have on the DC & that the selections are now greyed out on the workstation.
    The object of war is not to die for your country but to make the other bastard die for his - George Patton

  10. #10
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683
    Hey there

    Well I did the MMC thing and before I went home I say that all the computers were listed in Wsus console under unsigned computers. So yeah it worked.

    I will approve the updates and check.

    One question, on the workstation (every1 is an admin of their own PC) if they gpedit.msc will they be able to change the settings?
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

Similar Threads

  1. WSUS 3.0 Available
    By ShagDevil in forum Microsoft Security Discussions
    Replies: 10
    Last Post: July 18th, 2007, 03:38 AM
  2. Migrating wsus w/ cross cables
    By Derekeftink in forum Microsoft Security Discussions
    Replies: 2
    Last Post: January 23rd, 2007, 09:12 PM
  3. Microsoft not using Windows much on critical tasks.
    By gore in forum Operating Systems
    Replies: 56
    Last Post: February 24th, 2006, 06:57 AM
  4. Offline installation of Update's.
    By ByTeWrangler in forum Miscellaneous Security Discussions
    Replies: 1
    Last Post: December 4th, 2005, 07:25 AM
  5. Microsoft WUS goes RC1
    By Maestr0 in forum Microsoft Security Discussions
    Replies: 2
    Last Post: March 22nd, 2005, 11:21 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •