Re: AD GPO & Windows Update



"Kerplunk" <clynedrive@xxxxxxxxxxxx> wrote in message
news:etZ1KMJhFHA.2484@xxxxxxxxxxxxxxxxxxxxxxx
> Our AD has been set up some time and although the Admin Template for
Windows
> Update is installed and configured (Auto Update computers (option 4) at
> 13:00) none of the computers seem to update. I've read somewhere that the
> logged on user should be a member of the Administrators Group but surely
> this cannot be right ?

No, that is not right -- part of the BENEFIT of the Automatic Updates
(versus Windows Update) is that an admin is NOT required since it
runs under the computer account.

First step would be to run GPResult and/or RSoP (in Win2003) and
make sure that the GPO is really applied.

> How do I configure AD/GPO to automatically Update
> Windows without giving everyone Admin rights?

Also, for Win2000 machines you must install the AU Client but
with current service packs that was done long ago.

Along with GPO applied, make sure the computers are properly
authenticated AND that DNS is fully functional since they must
find the servers.

How about firewall checks?

How about setting it to reboot (in AU settings that is)? Since
the updates may be installed but not yet applied.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>
> Thanks in Advance.
>
> KErplunk
>
>


.



Relevant Pages

  • Re: Group Policy and user level access
    ... We are running Windows XP Pro and 2000 Pro on our computers. ... My second question is it possible to leave my users in the local admin ...
    (microsoft.public.win2000.security)
  • Re: Cannot access ADMIN$ on Windows XP Home from Vista Home Premiu
    ... Yet ADMIN$ and IPC$ and C$ show up on all 3 of my Windows XP home computers. ... Steve Winograd, MS-MVP ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: Cannot access ADMIN$ on Windows XP Home from Vista Home Premiu
    ... computers, from my Vista computer I can access ADMIN$ on any other Vista ... but I can not access ADMIN$ on any of my Windows XP computers. ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: Group Policy and user level access
    ... We are running Windows XP Pro and 2000 Pro on our computers. ... My second question is it possible to leave my users in the local admin ... Using Unix for network monitoring and engineering has way more functionality ...
    (microsoft.public.win2000.security)
  • Re: My Windows ME client is being obstinant
    ... >I have attached a Windows ME client to my Windows 2000 domain. ... > just cannot get it to appear in Active Directory Users and Computers. ... Accelerated MCSE ...
    (microsoft.public.win2000.active_directory)