asked on

Group Policy and SUS

Why is it that when I specify in my Intranet Microsoft Update service location GPO on my server that it does not show up in my local computer policy but it does in my REGISTRY?

on the server I have done the...

secedit /refreshpolicy user_policy /enforce
as well as the
secedit /refreshpolicy machine_policy /enforce

on the client I have done gpupdate and restarted.

the corect information is reflected in the REGISTRY under HKLM\software\policies\microsoft\windows\windowsupdate

I am ready to run my SUS server on my network but am unsure if this is a problem?

Please Help!!!

ASKER CERTIFIED SOLUTION

valicon

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

nihlcat

Yeah! On a client, go to your C:\winnt\Windows Update.log and that will tell you where your clients are pulling updates from.

zyanj

ASKER

so why is this not reflected in the local computer policy i.e. NOT grayed out.

if this is the case then isn't it possible for someone to change this setting @ the client level?

nihlcat

It should be. Have you added the machine accounts into the OU?

zyanj

ASKER

YES

nihlcat

OK

So you created an OU, moved the computer accounts into it, created a GP and installed the WUAU.adm template, and enabled 'Configure Automatic Updates' within that?
Just curious, what OS is the client?

zyanj

ASKER

Correct...

the clients are XP pro

kapes

buddy... it won't show in your "Local Policy"... its a separate config....

if you want to verify whether you received your Group Policy settings or not go to...

Start > Help and Support > Tools > Advanced system information > View Group Policy settings applied

Also.. if you want to see.. whether your clients are getting update from SUS server or not..

check %systemroot%\Windows Update.log

it should mention your SUS Servers entry there...