asked on

sus and win2k client updates

I am trying to configure sus sp1 and gpo to keep domain clients up to date. It appears, through running gpresult on my client, that the computer settings in my gpo are not be propagated to the client and the gpo's user settings are. The user setting section in the gpo disables access to microsofts windows updates site. I can enable/disable this switch and it is reliably reflected at the client. How ever the computer setting of my gpo which to my understanding is supposed to send sus registry settings to the client is not doing so. I have tried searching the registry for the wuserver key after logging in, I can't find it or other necessary sus keys.

Lee W, MVP

I trust you've rebooted the client(s). What SP are the clients at? Are you using the correct administrative template for setting up SUS via Group Policies?
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-42E6-8025-8C667B4C94E9&displaylang=en

ajes01

ASKER

The clients are win2k sp4. I have rebooted them several times during testing. I am using the current adminstrative template, though I did try your linked adm and ended up with the same result. It still is not passing the gpo computer settings or at least that is what appears to be happening.

ASKER CERTIFIED SOLUTION

Lee W, MVP

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ajes01

ASKER

My gpo is called SusUpdates you can see that is is applying the user settings but not the computer settings. Am I interpeting this correctly?

Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999

Created on Thursday, October 21, 2004 at 2:23:03 PM

Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:

CN=Shipping Receiving,OU=SusUpdates,DC=DOMNAM,DC=COMNAM,DC=com

Domain Name: DOMNAM
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\shipping.DOMNAM

The user is a member of the following security groups:

DOMNAM\Domain Users
\Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL
DOMNAM\ActShareG
DOMNAM\PrivateShareG
DOMNAM\PublicShareG
DOMNAM\ActShareL
DOMNAM\IOTS
DOMNAM\PrivateShareL
DOMNAM\PublicShareL

###############################################################

Last time Group Policy was applied: Thursday, October 21, 2004 at 2:22:45 PM
Group Policy was applied from: SERVER.DOMNAM.COMNAM.com

===============================================================

The user received "Registry" settings from these GPOs:

MP9 Security
SusUpdates

===============================================================
The user received "Scripts" settings from these GPOs:

Default Domain Policy
NetworkLoginLog

===============================================================
The user received "Internet Explorer Branding" settings from these GPOs:

IeCustomizations

###############################################################

Computer Group Policy results for:

CN=CRATER,CN=Computers,DC=DOMNAM,DC=COMNAM,DC=com

Domain Name: DOMNAM
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
CRATER\Debugger Users
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
DOMNAM\CRATER$
DOMNAM\Domain Computers

###############################################################

Last time Group Policy was applied: Thursday, October 21, 2004 at 2:22:36 PM
Group Policy was applied from: SERVER.DOMNAM.COMNAM.com

===============================================================

The computer received "Registry" settings from these GPOs:

Local Group Policy
MP9 Security
IeCustomizations
Default Domain Policy

===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy
Default Domain Policy

===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Default Domain Policy

===============================================================
The computer received "Application Management" settings from these GPOs:

MP9 Install

ajes01

ASKER

Well, I recreated the ou that holds the computers and it now works. Thanks for your efforts.