Re: SUS OU?

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Marin Marinov (mlmarinov_at_askme.ca)
Date: 06/18/04 

Date: Fri, 18 Jun 2004 09:55:01 -0400

<snip>
Luis, the client computer accounts have to be in this OU for this GPO to
apply. Also make sure your WinXPs are at least SP1 and Win2Ks are at
least SP3 or you install the automatic updates client. To configure them
with a GPO you should do the following:
1) Under computers right-click a computer account you want to move,
select Move and select the SUS OU. You shouldn't get an error, if you do
please copy it down *exactly* how it is stated.
2) Edit the SUS OU GPO to set the following:
        - Specify intranet Microsoft update service location - set the
NetBIOS, FQDN, or IP address of the target SUS server in both fields. To
avoid name resolution problems use an IP address
        - Configure Automatic Updates - set to "enabled" and select one of
the "auto download" settings (refer to the explain tab for more
information)
        - If you need you can configure the other two settings also. Refer
to their Explain tabs for more details.

3) On the client machine either refresh GP using:
        - For Win2K:
                secedit /refreshpolicy machine_policy /enforce
        - For WinXP:
                gpupdate /force
 and restart the "Automatic Updates" service or restart the machine. You
can then check on the client machine that it points to your SUS server
by viewing:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\

Value name: WUServer
Registry Value Type: Reg_SZ
This value sets the SUS server by HTTP name (for example,
http://IntranetSUS).

Value name: WUStatusServer
Registry Value Type: Reg_SZ
This value sets the SUS statistics server by HTTP name (for example,
http://IntranetSUS).

The values should be the ones you specified in the GPO.

I suggest you also review the "Software Update Services Deployment White
Paper" (if you haven't already done so) at:
http://www.microsoft.com/windowsserversystem/sus/susdeployment.mspx

Feel free to post again if you continue to have troubles with SUS.

HTH 

-- 
Cheers,
   Marin Marinov
   MCT, MCSE 2003/2000/NT4.0,
   MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no 
rights.
"True knowledge exists in knowing that you know nothing."
Socrates

Relevant Pages

  • Re: GPO is ignored after 2 weeks
    ... In the client event log, ... Ethernet adapter Server Local Area Connection: ... I have to stop some users on an SBS R2 accessing the Internet so I ... first, I believe there is a GPO to prevent internet access, however I ...
    (microsoft.public.windows.server.sbs)
  • Re: Server/Client help - User Profiles
    ... I setup an OU called New Users with a linked GPO "New Users GPO" in ... user2 is a member of the Domain Users group. ... I could not choose the client PC as the Computer Selection, ... folders had appeared. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SUS10SP1 with ShrPntSrvcs on IIS60?
    ... client to attempt to connect to the SUS server to get updates. ... the Windows Update.log file. ... Maybe that is because of the .aspx that Sharepoint ...
    (microsoft.public.inetserver.iis.security)
  • RE: GPO UPdate ??
    ... I went to client and did the gpupdate /force and I did that at the server ... On this same thread I am trying to add more items to my gpo. ... Do I need the same In the Security Filtering list, Authenticated Users? ...
    (microsoft.public.windows.server.sbs)
  • RE: GPO UPdate ??
    ... I went to client and did the gpupdate /force and I did that at the server ... On this same thread I am trying to add more items to my gpo. ... Do I need the same In the Security Filtering list, Authenticated Users? ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)