Software update Server and XP

[Griff389]

Hi All,

I've installed SUS on our Win2003 server and want to roll out updates to our 2000/xp clients but am having bother getting to work.

I installed the SUS on the server, set a scheduled download of updates and downloaded all updates from the WU site to it.
Then used the group policy management console along with the wuau template to create a policy to add the necessary entries into the client's registry for the SUS. The policy update works ok as it changes my local registry to include the following settings:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="

http://2k3testserver"

"WUStatusServer"="

http://2k3testserver"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000b

With all that set, the client is set to automatically download and install at a scheduled time of 11am, but nothing seems to happen.

Could anyone point in the direction of what might be wrong, or whether i've missed something out. Do I have to set the clients to disable windows update maybe? I don't know!.

Regards

Griff

 

[bcastner]

http://www.microsoft.com/windowsserversystem/sus/default.mspx

An excellent resouce:

http://www.faqshop.com/sus/default.htm

http://www.susserver.com/

 

[Griff389]

i've looked at the microsoft site and also downloaded a copy of the deployment guide, which i've followed.

I'll have a look at the other urls you gave and see if there's anything in there that helps.

 

[bcastner]

Note that in Mode 4, your choice above, essentially the time of the download to the client is unspecified and the installation time can be as long as a day (if the download occurs at 11:01, for example).

You might want to add the policy/registry entry:
RescheduleWaitTime
Type: Reg_DWORD

The value is in minutes after startup before installation begins on a machine that missed the scheduled installation time. A setting of 1 will force the installation at startup. 60 would be one hour after startup.

 

[Griff389]

I've looked at the sites ou mention, and added the reg key for the one I hadn't set. My windows update still seems to be downloading updates from ttp://windowsupdate.microsoft.com/v4/ though.

I'm wondering if maybe it's because i'm an administrator and not a user.

A lot of ideas suggest changing things in the Windows Update tab under system properties, but when I go there everything is greyed out.

 

[bcastner]

Jeremy Moskowitz: Admins can still go to Windows Update, but users will get turned away. Even so, in both cases Windows Update from within the browser points to that Microsoft site. Performing this SUS addition doesn't change that; you just bring additional scheduling functions to the table.

Clearly, you don't want admins going to that site anymore for updates. You can use another policy to stop this from happening. Do so by enabling the policy by clicking on User Configuration | Admin Templates | Start Menu and Taskbar | Remove links and access to Windows Update.

When you do, users and admins will get an Access Denied error if they perform a regular Windows Update.

For the rest of this article, go to:

http://mcpmag.com/Features/article.asp?EditorialsID=342

 

[Griff389]

yeah, got that bit, but as i'm still testing this i didn't want to lock it off just yet.
I'm not running the update from my web browser. I was just looking in the windowsupdate.log file to see if it had anything in particular in it, and it's logged in there that the automatic update is still going to the windows site rather than my sus testserver.

I'll keep persevering with it.