Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Excluding certain systems from automatic updates block

Posted on 2006-11-09
8
Medium Priority
?
267 Views
Last Modified: 2008-02-01
I have a w2k3 domain with group policy in place and have chosen to totally disable automatic updates on all systems.  (We push tested patches with zenworks, for now).  I have 2 systems that I would like to either allow automatic updates on or allow the user to run the automatic updates for testing purposes.

All domain users are local admins.

How can this be achieved?

Smak
0
Comment
Question by:talkinsmak
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 14

Expert Comment

by:inbarasan
ID: 17906513
Dear talkinsmak,
Which ever system you want to do update you can go to update.microsoft.com and update those patches he requires.

Cheers!
0
 
LVL 5

Author Comment

by:talkinsmak
ID: 17906520
I have blocked ALL access to windows update, including accessing the web page.
0
 
LVL 14

Expert Comment

by:inbarasan
ID: 17906540
You may put these systems in different OU and don't apply these GPO policy.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 5

Author Comment

by:talkinsmak
ID: 17906572
GPO is applied at the domain level.  It flows down from there.  
0
 
LVL 14

Expert Comment

by:inbarasan
ID: 17906691
I belive that You may use Block Inheritance so that it doesn't apply GPO on that OU
0
 
LVL 5

Author Comment

by:talkinsmak
ID: 17906764
Will not block inheritance with a domain policy.
0
 
LVL 2

Expert Comment

by:Francis_Beland
ID: 17907359
Since the GPO is only for Computer Configuration, you can put all Computers in an OU and create a GPO with the Windows Update blocked instead of having a Domain Policy. You then put the 2 machines you need in another OU and you can test Automatic Updates. Note that you probably need to link the Block Windows Update to the Domain Controller OU also.
0
 
LVL 10

Accepted Solution

by:
victornegri earned 750 total points
ID: 17907600
So you want to be able to allow systems to go to Windows Updates but you've disabled all access to Windows Update from the domain level and don't want to block that policy? You need to budge in some way in order to make this change.

One suggestion: If you apply another GPO to the OU closer to the user, it will overwrite the settings from the domain policy. That is, if you don't have No Override enabled on the domain policy. If that is the case, you will have to disable No Override (and make sure there are no Block Inheritances anywhere).

Another option: Don't block access to Windows Updates using GPOs but instead from the firewall and allow access from certain clients to Windows Update from there.
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question