GP editing

I double checked on my server today and you can access your Domain GP via the Active Directory. Open up your AD and right click on your domain. Select Properties and in the dialog box, you should see a tab titled "Group Policy".

You'll be able to edit it from there. Setting up the MMC is a bit more complicated but, works as well.

Open up the MMC console. File -> Add/Remove Snap-In -> Add -> (scroll down until you see) Group Policy Object Editor. Once you click that, another dialog box will appear looking for where this GPO resides. If you select the Browse button, you should see/have a Default Domain Policy.

Once you select that, it will set focus back on the dialog box where you can select Finish, then Close the Add/Remove dialog box and the GPO snap-in should be in your MMC console view. Like I said, a bit more complicated but it serves the same purpose.

Let me know how this works out!

I think that the gpmc requires .net 1.1. There are three different versions. http://www.microsoft.com/Downloads/d...displaylang=en Also, by default, I think WSUS automatically approves security and critical updates. You may want to doublecheck that setting in your WSUS options. You don't have to have the GPMC installed but it makes life easier. If you don't have it installed, you can access the policies in ad users and computers. Right click on the OU where the policy is deployed and go to properties. You should see the option to edit the policy in there.