WSus question

[bidon15]

Hello there,

I am planning to use the GPO in windows 2003 to push the MS security patches to all workstations. I have created a GPO (Note: On the GPO settting - the computer settings is made, and user setting is empty) and linked to the OU. Every thing looks good at this point.

Now my OU structure looks like this:

domain.local
|___Computer (container) - which has all computer.
|___Company Users (OU)
|__Depart OU
|__Depart OU
|__Depart OU
- In each department OU has all the users in there.

Now, i would like to push each depart OU by link the GPO to by depart OU to depart OU once at a time to test, so those users will be affected, right?

Ok, when i issued a command gpupdate and gpresult. It outputted on the user settings that GPO is applied, but it should applied the computer settings instead of user settings, right? because i only changed the computer settings and did not change any thing on user settings.

I know if i created an OU and moved computers account in that OU and link to the GPO and it works just fine.

My questions are:

- Do you know why it does that?
- what is the best way to push the GPO with my current OU structure? ( ALL computer accounts in the computer container, and Depart OU breakdown)
- If i link that GPO to domain, and using the security filtering (let's say i create a security group and remove the authentication users) does computer settings apply by user loggin?

Your help is very very very appreciate. I need to create a plan sometime next week. Please help!

 

[porkchopexpress]

No policies will affect computers in the default computers container, for WSUS to work you will need to put your computers in a new OU and apply the policy there.

Computer settings will not apply to user objects even when applied to a users OU.