WSUS

[Cider]

Hey there all

I have setup a WSUS server in the office. Was really bored

Now in order to point the machines to it I have to edit group policy on the workstation?

How do I do it from the server to deploy the settings to the domain? I assume a company with 100+ users cant go to every machine to edit their GP.

The head technichan has an MCSE and he doesnt know how to do it?

Any help appreciated.

[SirDice]

I'd fire his ass

http://oreilly.com/catalog/win2000ads/chapter/ch08.html

[Cider]

Hi there

Thanks for that Sirdice.

I am busy downloading Group policy management console for the server

I downloaded the tutorial from m$ on setting it up but couldnt find Group policy management console in Start > admin tools >

Thanks for the link though.

[phishphreek]

Click on start --> run and type "mmc" (less the quotes)

That will pull up the microsoft management console. From there click on file and then add/remove snap in. choose the snapins you want. You should see group policy editor or console in there.

BTW: You can create a mmc console and save it for future use. It's nice to have all the tools you need to use in one snapin all the time.

[SirDice]

Start -> Run... gpedit.msc

If it's not there copy it over from a server. It's a MMC plugin.

[Cider]

Yes however isnt gpedfit.msc concerning the machine and not the domain ?

I.E If I edit which server it must pull updates from in windows update template wont it just be for that PC, I really want to edit all the computers on the domain to use the settings I want to.

The DC isnt the on the same server which the WSUS is on. Got two servers running here.

[SirDice]

Oh right.. Just starting gpedit.msc will start the editor with the focus set to the local computer.

Start it like phish said then you're able to set the focus to the domain..

The file gpedit.msc is the actual MMC group policy snap-in.. So if it's not on your workstation just copy it over from a server.

Or this way:
http://support.microsoft.com/kb/221930

[Cider]

OK well I have gone and "MMC" on the DC. I have edited all the options.

Will this now edit all the workstations GP's when they log in?

[ShagDevil]

The head technichan has an MCSE and he doesnt know how to do it?

That's pretty sad.

The DC isnt the on the same server which the WSUS is on

We have the exact same setup here. We have a DC & an App server (where WSUS runs).

Will this now edit all the workstations GP's when they log in?

So long as you edited the Group Policy on the DC, all the workstations will universally apply those settings.

I have a couple questions. Is your WSUS server using SSL? If so, you'll need to create a certificate. Also, if you want to see if your workstations are applying Group Policy correctly, go to a workstation, start-> run->gpupdate

On the same workstation, go to the control panel, select Windows Updates and see if the selections on this machine match what you have on the DC & that the selections are now greyed out on the workstation.

[Cider]

Hey there

Well I did the MMC thing and before I went home I say that all the computers were listed in Wsus console under unsigned computers. So yeah it worked.

I will approve the updates and check.

One question, on the workstation (every1 is an admin of their own PC) if they gpedit.msc will they be able to change the settings?