Re: SUS Group Policy

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 05/06/04


Date: Thu, 6 May 2004 11:37:36 -0400

Kevin,

Yes it is.

I would suggest that you take a look at the Softwareupdatesvcs NG as there
are some really good resources in that NG. There will be some links to the
whitepapers that will explain everything that you need to know about SUS.

Please take a look at the following link:

http://www.microsoft.com/windowsserversystem/sus/default.mspx

This is the homepage for SUS. Take a look around there and you will find
your answers.

Essentially, what you need to do is to create an OU, move all of your
computer account objects into that OU and then create / link that GPO to
that OU. Naturally, you need to first download the SUS SP1 file and execute
it on a server of your choice ( and that server needs to be running IIS ).
You can now choose to run SUS on a Domain Controller with SP1 ( however, I
might avoid this if possible ). There will be some settings that you need
to configure once you have installed the software.

If you are running WIN2000 SP3 or WIN XP SP1a and above ( IIRC ) then you do
not need to distribute the SUS client ( aka Automatic Updates client ) to
your workstations.

You will just need to add the wuau.adm to your DC ( IIRC ) in the
C:\winnt\inf folder.

There is a really good paper on how to do this called
SUS_Deployguide_sp1.doc that will walk you through this process. If I had
the link I would gladly give it to you....

HTH,

Cary

"Kevin" <kevin.smith51@ntlworld.com> wrote in message
news:952f01c4337d$5b2a1670$a101280a@phx.gbl...
> I have installed SUS on my Windows 2000 Server that is
> running under a Windows 2000 Active Directory.
>
> I need to know if there is a way to set Group Policy in
> Windows 2000 to accept Windows Updates from a SUS Server
> and have the policy apply the settings on the highlighted
> client machines in my organisation.
>
> Is it possible to do this under Windows 2000 Server?



Relevant Pages

  • Re: Microsoft SUS on Apache?
    ... Group Policy which tells domain member machines to get their Windows ... believe by default with Windows XP (SUS doesn't provide patches for OS's ... way that client machines can get updates from an SUS server that I'm ... > for a Microsoft Server license to run it. ...
    (Security-Basics)
  • RE: Deploying Microsoft patches
    ... Try SUS from M$. ... windows update server for your organization. ... You can't use SUS to deploy your own updates (you can use this tool to ...
    (Security-Basics)
  • SUS broken upon installing KB867460 (.NET Framework 1.1 SP1)
    ... Windows Server 2003 Standard ... Via Windows Update site, updated only one update, KB867460 ... Now, trying to access SUSAdmin website, ... Spoke with MS tech support. ...
    (NT-Bugtraq)
  • Re: Upgrading from SUS to WSUS
    ... About those policies for WSUS, ... How to install Windows Server Update Services on SBS 2003: ... Well i never got SUS to actually update my ... > Config, then Admin, Temp, ten Windows Components, and Windows Update. ...
    (microsoft.public.windows.server.sbs)
  • Re: User autentification and access to "sister" domain resources
    ... As to SUS... ... I don't see why it wouldn't work as long as the host can resolve the server ... > siteA and another rootDC2 in siteB. ... > - link to all DCs from domain A is suddenly broken, ...
    (microsoft.public.win2000.active_directory)