Group Policy and SUS

Why is it that when I specify in my Intranet  Microsoft Update service location GPO on my server that it does not show up in my local computer policy but it does in my REGISTRY?

on the server I have done the...

secedit /refreshpolicy user_policy /enforce
as well as the
secedit /refreshpolicy machine_policy /enforce

on the client I have done gpupdate and restarted.

the corect information is reflected in the REGISTRY under HKLM\software\policies\microsoft\windows\windowsupdate

I am ready to run my SUS server on my network but am unsure if this is a problem?

Please Help!!!
Who is Participating?
valiconConnect With a Mentor Commented:
All you need to ensure is that the SUS server appears under the registry key.  After that,  the computers that will receive the updates from the SUS server, they will check in with the SUS server every 17-22 hours to see if there are any approved updates.  Check here for registry keys and settings:

A great resource for SUSserver is:

Hope this helps :)
Yeah!  On a client, go to your C:\winnt\Windows Update.log and that will tell you where your clients are pulling updates from.
zyanjAuthor Commented:
so why is this not reflected in the local computer policy i.e. NOT grayed out.

if this is the case then isn't it possible for someone to change this setting @ the client level?
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

It should be.  Have you added the machine accounts into the OU?
zyanjAuthor Commented:

So you created an OU, moved the computer accounts into it, created a GP and installed the WUAU.adm template, and enabled 'Configure Automatic Updates' within that?
Just curious, what OS is the client?
zyanjAuthor Commented:

the clients are XP pro

buddy... it won't show in your "Local Policy"... its a separate config....

if you want to verify whether you received your Group Policy settings or not go to...

Start > Help and Support > Tools > Advanced system information > View Group Policy settings applied

Also.. if you want to see.. whether your clients are getting update from SUS server or not..

check %systemroot%\Windows Update.log

it should mention your SUS Servers entry there...

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.