Re: Windows Update - Domain Controller

There are a couple of Group Policy settings that may be causing this and
they often are used when SUS is implemented in the domain so that only
authorized updates are installed. Try running the Resultant Set of Policy
mmc snapin on your domain controller using your logged on user account and
it will show all the current Group Policy settings applied to the computer
and user and the offending Group Policy settings should show up along with
the Group Policy that is applying them. You could then either disable the
settings or for "user" configuration you could filter the GP so that members
of administrators and domain admins have deny permission for apply for that
Group Policy or better yet move the user accounts for domain administrators
into an OU with a GPO linked to it with those settings disabled if that is
what you want. If it is computer configuration you could filter the GPO to
not apply to domain controllers or apply the GPO to an OU other than the
domain container, disable the settings for the domain level GPO, and move
the computers that it is supposed to apply to into that OU structure.

After a little bit more digging I found that this may be related to a
registry entry for "nowindowsupdate" that as far as I can tell was part of
Windows 2000 Group Policy for user configuration but I could not find the
similar setting in Windows XP/2003 [though I may have missed it] or it maybe
is the one now be called "remove access to all Windows update features" .
Anyhow the link below explains more on that. --- Steve

http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/regentry/92848.asp

"Rick" <Rick@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:98F3F8C7-27EC-4C2B-88B5-66E3DE3E257D@xxxxxxxxxxxxxxxx
>I am trying to allow Windows Update on my domain controllers using Server
>2003
>
> I keep getting the "When trying to access the Update site, you see the
> 0x8ddd0003 error " Network Policies prevent you from using Windows Update
>
> I have looked all thru the GP's but I must be missing something.
>
> I am just getting my feet wet with GP so I am no expert
>
> thanks
>
>


.

Relevant Pages

  • Re: Adding new ADM templates to Group Policy Edito
    ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... Unless you are using Vista since Vista won't add the adm-files to the GPO at SYSVOL and therefore it gives you all adm-files in your local inf-folder automatically when you create a new GPO. ... the only instructions I can find for adding these templates to the Group Policy Editor are to open a GPO and then right click Administrative Templates to get to the Add/Remove dialog. ...
    (microsoft.public.windows.group_policy)
  • Re: Adding new ADM templates to Group Policy Edito
    ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... Unless you are using Vista since Vista won't add the adm-files to the GPO at SYSVOL and therefore it gives you all adm-files in your local inf-folder automatically when you create a new GPO. ... the only instructions I can find for adding these templates to the Group Policy Editor are to open a GPO and then right click Administrative Templates to get to the Add/Remove dialog. ...
    (microsoft.public.windows.group_policy)
  • Re: manager user accounts
    ... You have a concern about the group policy settings applied on the clients. ... computer and which GPO the settings are in, you can restore the settings to ...
    (microsoft.public.windows.server.sbs)
  • Re: Need help configuring security on a stand alone terminal server.
    ... They allow you to set group policy settings that *only* ... Right-click on the GroupPolicy folder and choose Properties ... On the Security tab, ...
    (microsoft.public.windows.terminal_services)
  • Re: Need help configuring security on a stand alone terminal server.
    ... They allow you to set group policy settings that *only* ... They will *not* allow you to edit some ... On the Security tab, ...
    (microsoft.public.windows.terminal_services)