Re: SUS

From: Laura A. Robinson [MVP] (geekwench_at_hotmail.com.snip.this)
Date: 08/19/04

Next message: Laura A. Robinson [MVP]: "Re: What ports need to be open on a firewall for AD replication between DC"
Previous message: TheSingingCat: "Re: selling the cheapest Microsoft product"
In reply to: JdotB: "SUS"
Next in thread: Phil: "Re: SUS"
Messages sorted by: [ date ] [ thread ]

Date: Thu, 19 Aug 2004 11:47:45 -0400

In article <e#snrRahEHA.592@TK2MSFTNGP11.phx.gbl>, JdotB@hotmail.com says...
> Hi,
>
> I have setup a SUS Server on win2k. Ths sync has been all ok. however i'm
> having problems in getting the XP SP1 client machines and w2k3 server to use
> the local SUS server.
>
> what do i need to configure on these clients such that they use the local
> SUS server ?
>
Is this a domain environment? If so, you can configure this via group policy.
If this is a workgroup environment, then you need to make some registry
modifications to each machine you want to use the SUS box, similar to the
following (note that these are just copies of reg files and instructions that I
used when setting up a SUS server for an environment wherein developers each
had their own test machines and we had no centralized administration of these
boxes- everything from this point on is just copied and pasted from my files):

Here are the files and what they do:

1. 0-2.reg
0-2.reg will not configure your machine to automatically download updates from
the server, nor will it automatically install them. However, at 4:00 AM every
day, your machine will connect to the server to determine if there are any new
critical updates or service packs that your machine needs. If there are, your
machine will notify you that there are new updates and will ask you if you want
to download them. It will also ask you if you want to install them, and it will
automatically reboot if it needs to.

2. 0-3.reg
0-3.reg will configure your machine to automatically download updates from the
server, but not to automatically install them. Every day at 4:00 AM, your
machine will contact the server to find out if there are any new critical
updates or service packs, and if there are, then it will download them to its
own hard drive. When you log on, it will display a balloon asking you if you
want to install them, and you can choose whether or not to do so. Your machine
will automatically reboot if the patch(es) require(s) it.

3. 0-4.reg
0-4.reg will configure your machine to automatically download updates from the
server and automatically install them. Every day at 4:00 AM, your machine will
contact the server to find out if there are any new critical updates or service
packs, and if there are, will download them to its own hard drive and install
them once the download is complete. Your machine will automatically reboot if
necessary.

4. 1-2.reg
1-2.reg will not configure your machine to automatically download updates from
the server, nor will your machine automatically install them. However, at 4:00
AM every day, it will connect to the server to determine if there are any new
critical updates or service packs that apply to it. If there are, your machine
will notify you that there are new updates and will ask you if you want to
download them. It will also ask you if you want to install them, but it will
not automatically reboot.

5. 1-3.reg
1-3.reg will configure your machine to automatically download updates from the
server, but not to automatically install them. Every day at 4:00 AM, your
machine will contact the server to find out if there are any new critical
updates or service packs, and if there are, then it will download them to its
own hard drive. When you log on, it will notify you that there are new updates
and ask you if you want to install them, and you can choose whether or not to
do so. It will not automatically reboot your machine when you install patches
that require reboots.

6. 1-4.reg
1-4.reg will configure your machine to automatically download updates from the
server and automatically install them. Every day at 4:00 AM, your machine will
contact the server to find out if there are any new critical updates or service
packs, and if there are, it will download them to its own hard drive and
install them once the download is complete. Your machine will not be
automatically rebooted.

So, in summary:

Options:

0-2.reg
Prompts for both download and install of patches; reboots if necessary. Checks
daily at 4:00 AM for new critical updates.

0-3.reg
Automatically downloads patches and prompts for installation; reboots if
necessary. Checks daily at 4:00 AM for new critical updates.

0-4.reg
Automatically downloads and installs patches; reboots if necessary. Checks
daily at 4:00 AM for new critical updates.

1-2.reg
Prompts for both download and install of patches; does not automatically
reboot. Checks daily at 4:00 AM for new critical updates.

1-3.reg
Automatically downloads patches and prompts for installation; does not
automatically reboot. Checks daily at 4:00 AM for new critical updates.

1-4.reg
Automatically downloads and installs patches; does not automatically reboot.
Checks daily at 4:00 AM for new critical updates.

File 0-2.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://>"
"WUStatusServer"="http://>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"RescheduleWaitTime"=dword:00000005
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000002
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000004

;Notifies before downloading critical patches
;Local Administrator is always notified

;Patch installation optional

;Reboots automatically

;Updates patch list daily at 4 AM

File 0-3.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://>"
"WUStatusServer"="http://>"

"AUOptions"=dword:00000003
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000004

;Does not notify before downloading critical patches
;Local Administrator is always notified

;Installs patches automatically

;Reboots automatically

;Updates patch list daily at 4 AM

File 0-4.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://>"
"WUStatusServer"="http://>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"RescheduleWaitTime"=dword:00000005
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000004

;Does not notify before downloading critical patches
;Local Administrator is always notified

;Does not notify before installing critical patches

;Reboots automatically

;Updates patch list daily at 4 AM

File 1-2.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://>"
"WUStatusServer"="http://>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"RescheduleWaitTime"=dword:00000005
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000002
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000004

;Notifies before downloading patches
;Local Administrator is always notified

;Patch installation optional

;Does not reboot if a user is logged on

;Updates machine daily at 4 AM

File 1-3.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://>"
"WUStatusServer"="http://>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"RescheduleWaitTime"=dword:00000005
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000004

;Does not notify before downloading critical patches
;Local Administrator is always notified

;Patch installation optional

;Does not reboot if a user is logged on

;Updates patch list daily at 4 AM

File 1-4.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://>"
"WUStatusServer"="http://>"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"RescheduleWaitTime"=dword:00000005
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000004

;Does not notify before downloading critical patches
;Local Administrator is always notified

;Does not notify before installing critical patches

;Does not reboot if a user is logged on

;Updates patch list daily at 4 AM

HTH,

Laura

Next message: Laura A. Robinson [MVP]: "Re: What ports need to be open on a firewall for AD replication between DC"
Previous message: TheSingingCat: "Re: selling the cheapest Microsoft product"
In reply to: JdotB: "SUS"
Next in thread: Phil: "Re: SUS"
Messages sorted by: [ date ] [ thread ]

Relevant Pages

Re: i cant update windows!
... > download, but at the very end of the process it says that the ... I havent been able to get any updates ... First - cleanup your machine and ready it for Service Pack 2. ... Then install Service Pack 2 from the downloaded install file (not the ...
(microsoft.public.windowsxp.general)
Re: Do i need SP2?
... > I am running XP pro with all updates EXCEPT SP2. ... many patches will begin requiring SP2 to install.. ... and some you can only download if you are registered - but it is best ...
(microsoft.public.windowsxp.general)
Re: FYI for eTrust AV 7.x Users
... When I just had my little incident with the redistribution settings on the SBS, my clients were logging successful checks for updates, and the logs indicated that no updates were found. ... That turned out to be because I had not gone back and checked the redistribution server box for 8.x after reinstalling the redistribution server. ... installed the new remote install utility which works the same as v7 did - just edited the .ICF file the way I wanted it and ran the client upgrades from the server. ... I can't remember if it's a separate install, or if you have to click a box when you do the Agent install, but redistribution server is not installed by default. ...
(microsoft.public.windows.server.sbs)
Re: Disaster Restore SBS2003
... If you had the server set to download updates automatically (never ... then install any service packs to return the server to the same service pack ... have the correct version of NTBackup prior to the restore. ...
(microsoft.public.windows.server.sbs)
Re: Automatic Update Default Settings
... on the Automatic Download set up page you are really only setting install ... automatic install when turning the computer off. ... Ten updates were waiting to be ... I mean the compuer is completely off in the old fashion Windows XP ...
(microsoft.public.windowsupdate)