Re: Automatic Updates on Server Turned on & greyed out - yikes!

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi, Steve,

The problem is most likely with WSUS, which is apparently controlling the
updates on your network.

This is not necessarily a bad thing if you use WSUS to your advantage. On my
network I put the servers into a different WSUS computer group so I can
control the updates as I see fit.

--
George Merriman
See Factor Industry, Inc.


"Steve V." wrote:

Thanks for the response Bill, here's the feedback from the GpResult command,
any ideas? ;


Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 8/24/2007 at 9:50:41 AM



RSOP data for PCWHIP\administrator on SBSERVER : Logging Mode
--------------------------------------------------------------

OS Type: Microsoft(R) Windows(R) Server 2003 for Small
Business Server
OS Configuration: Primary Domain Controller
OS Version: 5.2.3790
Terminal Server Mode: Remote Administration
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\Administrator
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=SBSERVER,OU=Domain Controllers,DC=PcWhip,DC=local
Last time Group Policy was applied: 8/24/2007 at 9:48:43 AM
Group Policy was applied from: sbserver.PcWhip.local
Group Policy slow link threshold: 500 kbps
Domain Name: PcWhip
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Small Business Server Auditing Policy
Default Domain Controllers Policy
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Small Business Server Domain Password Policy
Default Domain Policy
WSUS

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server - Windows Vista policy
Filtering: Denied (WMI Filter)
WMI Filter: Vista

Small Business Server Windows Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups
-------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
BUILTIN\Pre-Windows 2000 Compatible Access
Windows Authorization Access Group
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
SBSERVER$
Exchange Domain Servers
Domain Controllers
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Exchange Enterprise Servers
SQLAccessGroup {5c9e071e-3dcc-463b-94df-c07bc066e7ef}
RAS and IAS Servers
PrivUserGroup {5c9e071e-3dcc-463b-94df-c07bc066e7ef}

Resultant Set Of Policies for Computer
---------------------------------------

Software Installations
----------------------
N/A

Startup Scripts
---------------
N/A

Shutdown Scripts
----------------
N/A

Account Policies
----------------
GPO: Default Domain Policy
Policy: MaxServiceAge
Computer Setting: 600

GPO: Default Domain Policy
Policy: LockoutBadCount
Computer Setting: 50

GPO: Default Domain Policy
Policy: MaxTicketAge
Computer Setting: 10

GPO: Default Domain Policy
Policy: PasswordHistorySize
Computer Setting: 24

GPO: Small Business Server Domain Password Policy
Policy: MinimumPasswordAge
Computer Setting: N/A

GPO: Small Business Server Domain Password Policy
Policy: PasswordHistorySize
Computer Setting: 24

GPO: Default Domain Policy
Policy: MaximumPasswordAge
Computer Setting: 4294967295

GPO: Small Business Server Lockout Policy
Policy: LockoutDuration
Computer Setting: 10

GPO: Small Business Server Lockout Policy
Policy: ResetLockoutCount
Computer Setting: 10

GPO: Default Domain Policy
Policy: MaxClockSkew
Computer Setting: 5

GPO: Default Domain Policy
Policy: MinimumPasswordLength
Computer Setting: N/A

GPO: Default Domain Policy
Policy: MinimumPasswordAge
Computer Setting: N/A

GPO: Small Business Server Domain Password Policy
Policy: MinimumPasswordLength
Computer Setting: N/A

GPO: Small Business Server Lockout Policy
Policy: LockoutBadCount
Computer Setting: 50

GPO: Default Domain Policy
Policy: ResetLockoutCount
Computer Setting: 10

GPO: Small Business Server Domain Password Policy
Policy: MaximumPasswordAge
Computer Setting: 4294967295

GPO: Default Domain Policy
Policy: LockoutDuration
Computer Setting: 10

GPO: Default Domain Policy
Policy: MaxRenewAge
Computer Setting: 7

Audit Policy
------------
GPO: Default Domain Controllers Policy
Policy: AuditPolicyChange
Computer Setting: No Auditing

GPO: Default Domain Controllers Policy
Policy: AuditPrivilegeUse
Computer Setting: No Auditing

GPO: Default Domain Controllers Policy
Policy: AuditLogonEvents
Computer Setting: Success

GPO: Small Business Server Auditing Policy
Policy: AuditDSAccess
Computer Setting: No Auditing

GPO: Default Domain Controllers Policy
Policy: AuditAccountLogon
Computer Setting: Success

GPO: Default Domain Controllers Policy
Policy: AuditObjectAccess
Computer Setting: No Auditing

GPO: Default Domain Controllers Policy
Policy: AuditDSAccess
Computer Setting: No Auditing

GPO: Default Domain Controllers Policy
Policy: AuditAccountManage
Computer Setting: No Auditing

GPO: Small Business Server Auditing Policy
Policy: AuditLogonEvents
Computer Setting: Success, Failure

GPO: Default Domain Controllers Policy
Policy: AuditProcessTracking
Computer Setting: No Auditing

GPO: Default Domain Controllers Policy
Policy: AuditSystemEvents
Computer Setting: No Auditing

User Rights
-----------
GPO: Default Domain Controllers Policy
Policy: MachineAccountPrivilege
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: DenyNetworkLogonRight
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: RestorePrivilege
Computer Setting: Administrators
Backup Operators

GPO: Default Domain Controllers Policy
Policy: TcbPrivilege
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: SystemProfilePrivilege
Computer Setting: Administrators

GPO: Default Domain Controllers Policy
Policy: DenyServiceLogonRight
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: ServiceLogonRight
Computer Setting: PCWHIP\CRM_WPG
NETWORK SERVICE
PCWHIP\Administrator
PCWHIP\QBDataServiceUser17

GPO: Default Domain Controllers Policy
Policy: UndockPrivilege
Computer Setting: Administrators
*S-1-5-32-547

GPO: Default Domain Controllers Policy
Policy: CreatePermanentPrivilege
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: AuditPrivilege
Computer Setting: LOCAL SERVICE
NETWORK SERVICE

GPO: Default Domain Controllers Policy
Policy: TakeOwnershipPrivilege
Computer Setting: Administrators

GPO: Default Domain Controllers Policy
Policy: CreatePagefilePrivilege
Computer Setting: Administrators

GPO: Default Domain Controllers Policy
Policy: EnableDelegationPrivilege
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: DebugPrivilege
Computer Setting: Administrators

GPO: Default Domain Controllers Policy
Policy: SystemTimePrivilege
Computer Setting: Administrators
*S-1-5-32-547
LOCAL SERVICE

GPO: Default Domain Controllers Policy
Policy: DenyBatchLogonRight
Computer Setting: N/A

GPO: Default Domain Controllers Policy
Policy: BackupPrivilege
Computer Setting: Administrators
Backup Operators

GPO: Default Domain Controllers Policy
Policy: CreateTokenPrivilege
Computer Setting: N/A

GPO: Default Domain Controllers Policy
.

Relevant Pages