SUS Microsoft Updates run silently?

[Geezer]

I am having a problem configuring the SUS Microsoft client machines for the windows updates. We are trying to deploy this over a network of 2K Pro and XP Pro.

I have the SUS server set up fine and the updates do install if I am logged on in admin account but when I log on as a student account nothing happens. Also I get a notify pop up in the task bar when logged on as admin, I shouldn’t get this.
I have read the documents and made the changes via Group Policy.

Is it possible to have the machines on the network install the updates if no one is logged on, just the machines are turned on & without any pop ups, any notifies or admin rights on the machine? The SUS Client wont install on the network machines so we are using the Patch Management.exe

Here is a copy of the .reg file from a 2000 pro machine. (The windows Update Branch)
Can anyone see any problems?

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate]
"PingID"=hex:65,02,b9,19,e0,09,cb,49,90,3d,11,51,cf,27,6e,9a
"AccountDomainSid"=hex:01,04,00,00,00,00,00,05,15,00,00,00,be,04,3e,32,f0,94,\
c8,5f,8a,a7,32,00,3f
"WUServer"="http://isaproxy"
"UseWUServer"=dword:00000001
"WUStatusServer"="http://isaproxy"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000004
"AUState"=dword:00000008
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000010
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"UseWUServer"=dword:00000001
"ScheduledInstallDate"="2004.01.29 09:00:00"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OemInfo]
"Mask"=dword:00000000
"OemInfoVersion"=dword:00000002

[thehorse13]

I have machines that are not members of AD using SUS without an issue. Also, I have end user and admin accounts both using this just fine.

What I can do is post a copy of the REG file that I use on all of my machines. You seem to have additional reg keys specified that I don't use at all.

[ikalo]

I don't remember quite accurately, but you have instructions in .doc file that can be downladed at same place as SUS.
It is actualy very easy, because all job can be done using GP. You don't need any SUS client, window automatic update is client, and you only need SP3 for w2k.
In GP you set server for updates, time for applieing updates and the only thing you must do is to make sure that all computer are turned on, and it would be nice that they are not used, because some updates are rebooting computer.

there is a pop-up if someone with no admin rights is loged, that says that computer will be rebooted in 5 minutes (and counting down) so user can save documents and close programs.


Edit:
here is link wher you can downlad SUS, administrative template and Deployment guide. That is all you need. It took me 1 hour to set up everything on my corporate LAN.
http://www.microsoft.com/downloads/d...DisplayLang=en

[Geezer]

thehorse13
Yes if you could post a copy of your .reg file that might help. Did you just use the registry file and make changes in Group Policy?


Ikalo
Yes I have all the documents thanks. Maybe where I am going wrong is installing the executable and the .reg file I made, perhaps there’s a conflict.

[ikalo]

I have double check your reg list once again.

and one thing caught my attention

automatic update is sheduled for january 29th. Until then automatic update won't start itself.

so you can try to set automatic update to run dayli.

you probably don't have AD deployed, right?
so if you use GP you have to set it up on each box... but I gues you already did that...

to conclude... check the settings for shedule...

EDIT:
One more suggestion, if you can afford one more box for test SUS, set up one pair test server-test worsktation to check if updates are ok... then on main SUS aprove tested updates manualy... also, you can set up test server to get updates from MS, and main SUS to get updates from test SUS, it will save some bandwith...

[Geezer]

Once it works without a hitch on 2K and XP we will build a package from the changes and deploy room by room, just to be sure.

The date was right on that machine, i'm just using test machines at the moment.

[SDK]

First of all, the reg you should post here is [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]

Here my reg export of my a WinXP Workstation connection to a SUS Server. Everythink after --> is a comment

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="REMOVE" --> I remove my server name here. http://isaproxy is good for you.
"WUStatusServer"="REMOVE" --> I remove my server name here. http://isaproxy is good for you.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001 --> Set this to 1 to enable Automatic Updates to use the server running Software Update Services as specified in WUServer below.
"RescheduleWaitTime"=dword:00000001 --> Time Wait before applying update after the scheduled time is pass.
"AUOptions"=dword:00000004 --> Range = 2|3|4. 2 = notify of download and installation, 3 = automatically download and notify of installation, and 4 = automatic download and scheduled installation. All options notify the local administrator.
"ScheduledInstallDay"=dword:00000003 --> Range = 0|1|2|3|4|5|6|7. 0 = Every day; 1 through 7 = the days of the week from Sunday (1) to Saturday (7).
"ScheduledInstallTime"=dword:00000005 -->Range = n; where n = the time of day in 24-hour format (0-23).

"NoAutoRebootWithLoggedOnUsers"=dword:00000000 --> Set this to 1 if you want the logged on users to choose whether or not to reboot their system
"NoAutoUpdate"=dword:00000000 -->Range = 0|1. 0 = Automatic Updates is enabled (default), 1 = Automatic Updates is disabled.

Check this link ( http://www.susserver.com/FAQs/FAQ-Au...teSettings.asp ) for top quality help! Better that I wrote!

More Link :
http://www.microsoft.com/windows2000...yguide_sp1.doc --> The Documentation from M$.
http://www.susserver.com/ --> Nice Overall Info - Their FAQ is realy nice!

Good Luck!