Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1478
  • Last Modified:

How do I use AD Group policy to block Windows Updates from installing XP SP2?

How do I use AD Group policy to block XP SP2?  I know that this will be pushed out by Windows Update on August 16.  We have not tested this service pack completely, and we need to block it for a while.  Microsoft indicates that we can stop SP2 by group policy, but I cannot figure out how to do it.  I know where the setting is to block Windows Updates completely, but I do not want to do that.  I just need to black SP2 for XP.
0
lileto
Asked:
lileto
1 Solution
 
dgroscostCommented:
Currently, XP SP2 is only available through automatic updates.  In the future, I'm sure it will be available for network installs and such (EXE version)

For the time being, you can DISABLE Automatic Updates via Group Policy.  This will prevent any updates from occurring.

For the future, when the EXE is released, along with a procedure stating it is not allowed by your company, not having administrator access should be enough to stop the installation.

Pretty much use this link, but instead of enabling AU, choose to DISABLE it instead of Not Configured or Enabled.

http://support.microsoft.com/?kbid=328010

OR -- if you have an internal SUS server, you can just NOT APPROVE the XP SP2 update and it won't be released.

http://www.susserver.com/Articles/SUS-InstallingSUS-Basic.asp
http://www.microsoft.com/windowsserversystem/sus/default.mspx

SUS is probably the best solution but for the time being you can simply block Automatic Updates with GP if you need to.
0
 
winzigCommented:
I think that whay you need is following article:
Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2aumng.mspx
0
 
Brave_Sir_RobinCommented:
Hi lileto,

This site has a link to download a bunch of tools to do what your after. The tool in particular that I think you want is an ADM script included in the download....

http://www.microsoft.com/downloads/details.aspx?FamilyId=8BCE6BBA-EA5D-4425-89C1-C1CB1CCD463C&displaylang=en

Hope this helps.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
ashishdagaCommented:
http://www.tek-tips.com/gviewthread.cfm/pid/779/qid/898363

Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates
0
 
fixnixCommented:
Just a minor correction to dgroscost's post:  

"Currently, XP SP2 is only available through automatic updates.  In the future, I'm sure it will be available for network installs and such (EXE version)"

It's the other way around.  I downloaded it 2 days ago.  The exe (for English) is at:

http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en

Just an FYI and sorry it's off topic of the original question.
0
 
LordRipperCommented:
well just disable all windows updates ...... this will solfe your prblem ....
0
 
G3m1n1Commented:
If your using GPO anyway, I would consider not using the Automatic Update option on the cliens and isntall a SUS server.  It will manage all your updates for your clients and you can pick and choose which updates to push to your clients on your own.  We use it my company and it works like a charm.

http://www.microsoft.com/downloads/details.aspx?FamilyId=38D7E99B-E780-43E5-AA84-CDF6450D8F99&displaylang=en

But if you want to just block it temporarily, try this:

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2aumng.mspx
0
 
liletoAuthor Commented:
Disabling all of Windows Updates via group policy is not a good answer.  I would recommend that this not be done, since this would disable all critical updates that have nothing to do with SP2.  I ended up sending up the link for SP2 blocker that will block SP2 for 120 days.  We are going to be doing some extensive testing of the service pack before the update is going to be forced by Microsoft.  I may install an SUS server before then and reconfigure Automatic updates to point to that server.  Thanks for the recommendations.  As always, this site is generally clearer about the practical steps than Microsoft.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now