SUS Workstation Install Options 1

[MetsFan]

Hello,

I recently setup a SUS Server on our network and have the majority of the workstations on the network looking at it for the latest updates. I need to know, being that these systems are all running Windows 2000 Pro, and each user is
a administrator on their local machine, is there any way to bypass the windows update balloon in the bottom right hand corner of the screen telling them that the updates are downloaded and that they need to authorize the installation. I want to be able to have this run in the background (if possible) and have the updates install without any end-user intervention. I think that the only way to do this is to make it so that the end-users are not local admins on their desktops, but for some reason they have to be (a software issue occurs when they are not local admins). Is there any way around this?
Thanks for your help in advance.

Eddie

 

[compgirlfhredi]

If you DON'T have Tweak, you can still do it
Start, Run, regedit
Navigate your way to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AdvancedRight click on the right side and choose New, DWORD Value
Type: EnableBalloonTips
Hit enter twice and make sure that it has a value of 0
Hit ok...and close regedit

 

[mrtoledo]

If you goto

http://www.susserver.com,

they have a complete list of all of the setting and options for a client. One of the settings (set in the registery or from a policy) can tell the machine to download and install all of the updates automatically.

AUOptions
Type: Reg_DWORD The notification, download and installation behaviour of the AutoUpdate client.
Settings: 2 - Notify Admin-priv user of a pending update waiting to be downloaded. User will initate the download and installation.
3- Automatically downloads updates and notify Admin-priv user of pending installation.
4- Automatically downloads updates. Installation will occur at the scheduled day/time. While scheduled, an Admin-priv user will see a brief balloon and systemtray icon, this allows the update to be installed before the scheduled time

 

[MetsFan]

What exactly does the reg hack do that you entered above compgirlfhredi? What I am trying to do is make it so that the installations can be installed whether you are an admin or not, without anyone clicking the balloons or verifying the updates that have been downloaded for installation. I would preferably like it to install the updates and just inform the user that they are going to have to shutdown what they are working on because the computer is going to reboot in a few minutes. Will this do that, or does it just hide the windows update balloon?

Eddie Martin
Network Support Technician

Email: emartin@bridgecom.com

**Don't forget to mark post helpful if it helps to answer your question. It may come in handy for others as well**

 

[MetsFan]

BTW: What is TWEAK, and will it help me configure these desktops?

Eddie

Eddie Martin
Network Support Technician

Email: emartin@bridgecom.com

**Don't forget to mark post helpful if it helps to answer your question. It may come in handy for others as well**

 

[MetsFan]

Well I tried compgirl's reg hack and the windows update balloon still came up, and it still told me that new updates are ready to be installed. I know how to modify the settings in Group Policy already to set the times and how you want to be notified. I know what most of the configure settings mean except for download and schedule installation. When does it ask you to to schedule the installation once it has been downloaded?


Eddie Martin
Network Support Technician

Email: emartin@bridgecom.com

**Don't forget to mark post helpful if it helps to answer your question. It may come in handy for others as well**

 

[mrtoledo]

If you set the AU options to 4. It will install at the "ScheduledInstallTime". The balloon will still pop up on the toolbar to allow the user to install the patch sooner than that if he/she chooses, otherwise it will install at the scheduled time.

Here is a part of the registery to install all updates everyday at 8:00am

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"UseWUServer"=dword:00000001
"RescheduleWaitTime"=dword:00000002
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000008

 

[MetsFan]

Thanks for your help. If I would have just selected the option to schedule the installation once instead of selecting to notify every user of the installation I would have figured it out. I appreciate your help and am sure there will be more people asking these same questions.

Thanks Again,

Eddie


Eddie Martin
Network Support Technician

Email: emartin@bridgecom.com

**Don't forget to mark post helpful if it helps to answer your question. It may come in handy for others as well**