Updates domain workstations using GP?

[kwei]

Hey guys, I was wondering if its possible to do windows updates to workstations on a domain with a w2k server using group policies. I'm getting tired of downloading the same patch over and over and over....: )

I guess a second part to this question would be, if that is not possible, is it at least possible to download the small, periodic updates and save them to a specified location, rather than having to do it at each node. Thank you very much in advance.

Justin

 

[PiMMeL]

You can do it with a few programs. I would look on the Microsoft website for the SUS stuff. This will however not work on a doamin controller which bummed me out a bit but there are some other solutions I am working/training on right now.

So Good luck...the artical about SUS tells you more...

Another file I downloaded which should do it is hfnetchkltsetup.exe. this is freeware I think but didn't have a chance to test it yet.

 

[kwei]

Thanks for the tips, I'll give them a try, I'm slightly familiar with the later, but from what I know of that tool it is just used to tell you what patches have been applied to a machine...

 

[Antony13]

Software Update Services from Microsoft is your best bet (

http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp).

Using this with group policy and scripting gives you a good free way to keep clients up to date.

Also, UpdateEXPERT (

http://www.stbernard.com/products/updateexpert/products_updateexpert.asp)

is another 3rd party product which can handle updates if you've got non W2K/XP clients.

Cheers, Antony

 

[kwei]

Ok I've installed SUS onto my DC, I'm going through the white papers for it, and I'm not seeing the "configure automatic update properties" policy, under group policies, as specified. According to the documentation, the setting should be under: Computer Configuration\Administrative Templates\Windows Components\Windows Update. However the only options available that I am seeing under \windows components\ are "netmmeting", "internet explorer", "task scheduler", and "windows installer". Anyone else run into this problem? I'm wondering why I'm not seeing what "should" be there. Thanks much,

Justin

 

[northstardave]

You have to add the "wuau.adm" template to your group policy. Somewhere on the ms SUS web page there is a link for the template file. Open up your group policy, right click Administrative Templates, & use the "Add/Remove" option to install it.

 

[kwei]

"You have to add the "wuau.adm" template to your group policy. Somewhere on the ms SUS web page there is a link for the template file. Open up your group policy, right click Administrative Templates, & use the "Add/Remove" option to install it."

AHHH! Thank you, trying it right now!

Justin

 

[kwei]

Ok, I have the wuau.adm template installed. If I goto gpedit.msc I can edit that template, and I have the server itself, setup to use SUS locally. But, the policies for the computers on the domain dont seem to be appying properly. I have a OU created for my domain users, which is where I normally apply my policies. I added the wuau.adm template, and configured my settings. used secedit to update my policies across the network, rebooted the client machines, AND waited a couple days. Policies still dont seem to be taking effect. My first guess is that I am not applying the policy properly, but have no clue where else I would apply it. Any further assistance? Thanks much guys!

Justin

 

[chutcheson]

I'm having the same exact problem as you kwei, Im wondering why my policies don't seem to take effect...

 

[doomhamur]

Kewi, your problem is that you installed it onto a DC and this software will only work if installed on a win2k member server. Reinstall onto a member server, redo your config and try again
Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."
yahoo IM handle: greater_vortex

 

[chutcheson]

I have installed SUS on a Member/Web Server. But, the policies that are setup will not work for some reason??!!??