GP editing

Hi All

Server = 2k3
Workstations = XP PRof and Vista business

I thought this was working but it isnt. Everyone was receiving updates so I thought my WSUS was rolling nicely. However I didnt approve any for about a week and noticed most XP machines have updates. I was stumped.

Anyway after some investigation I see there is an option which was not configured "allow recommended updates via automatic updates".

I assume that setting goes through to m$ and bypasses WSUS which I dont want to happen.


Now to edit the whole Domains GP do i use on the server

1. Start > Run gpedit.msc

or

2. mmc

Thanks. Sorry im abit confused.

Quote:

---

Now to edit the whole Domains GP

---

You would use Group Policy Management under Administrative Tools.

You should have a Default Domain Policy

In that policy you'll need to change some settings under here:
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update

This setting will point all your workstations to your WSUS server (If Enabled):
Specify Intranet Microsoft update Service Location

You have to tell your workstations where the WSUS Server is using this syntax:
http://WSUS-SERVER:8530 (or whatever port you'll be using)

Um , please look at the attachment.

I dont see this.

Quote:

---

You would use Group Policy Management under Administrative Tools.

You should have a Default Domain Policy

---

That's because you don't have the GPM snap-in installed :eek7:

You can download it here:
http://www.microsoft.com/downloads/d...displaylang=en

Trust me, it's a worthwhile snap-in if you're going to start playing around with Domain Group Policy.

OK - Just install it and it should pop up in the list ?

EDIT: Complaining about .net framework, gonna ge that downloaded and isntall

Yeah, you should see a Group Policy Management option under your Administrative Tools once it's installed.

Well I looked in add/remove and saw .net 3 in there ... even though it was complaining .net wasnt isntalled. So i removed it.

Well now apparently I have killed exchange as it was running of it.

Now im downloading .net from m$ to reinstall.

Wonder why it wasnt complaining.

Hi there SD

Even after reinstalling / uninstalling I get the same error when trying to installl the GP.

PLease check attachment.

Sorry for the delayed reply. I was running around like crazy today.

Quote:

---

Well now apparently I have killed exchange as it was running of it

---

Well had I known it would be such a pain in the arse, I wouldn't have recommended it. If it's causing that many problems, forget it for now and just use your MMC. I think you can also access Group Policy via (right click) properties of your domain in AD. I've used the GPMC for so long now, I've forgot how I used to access the GP any other way.

Hi there

Well the exchange is fixed now, had to reinstall .net framework.

The GPMC is still complaining about not having .net framework installed.

Can you guide me through setting it up the default way otherwise a wrokaround for it complainging about .net framework.

I double checked on my server today and you can access your Domain GP via the Active Directory. Open up your AD and right click on your domain. Select Properties and in the dialog box, you should see a tab titled "Group Policy".

You'll be able to edit it from there. Setting up the MMC is a bit more complicated but, works as well.

Open up the MMC console. File -> Add/Remove Snap-In -> Add -> (scroll down until you see) Group Policy Object Editor. Once you click that, another dialog box will appear looking for where this GPO resides. If you select the Browse button, you should see/have a Default Domain Policy.

Once you select that, it will set focus back on the dialog box where you can select Finish, then Close the Add/Remove dialog box and the GPO snap-in should be in your MMC console view. Like I said, a bit more complicated but it serves the same purpose.

Let me know how this works out!

I think that the gpmc requires .net 1.1. There are three different versions. http://www.microsoft.com/Downloads/d...displaylang=en Also, by default, I think WSUS automatically approves security and critical updates. You may want to doublecheck that setting in your WSUS options. You don't have to have the GPMC installed but it makes life easier. If you don't have it installed, you can access the policies in ad users and computers. Right click on the OU where the policy is deployed and go to properties. You should see the option to edit the policy in there.