Link to home
Start Free TrialLog in
Avatar of nstand
nstand

asked on

WSUS Group Policy - Install on Shutdown

I am trying to configure a WSUS (v2) Group Policy Object so include the Shutdown and Install patches as the default shutdown/log off display message as described in this article:

http://www.microsoft.com/technet/community/columns/sectip/st0506.mspx

And as shown in this image as 'Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box'

http://www.microsoft.com/library/media/1033/technet/images/community/columns/sectip/local_group_obj_editor_toprop.JPG

Now the issue I am having is the WSUS.adm file I am using doesnt have this setting. I have tried to download the correct file and this looks like the latest release:
http://www.microsoft.com/downloads/details.aspx?familyid=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en

But when I import the settings I do not see the 2 settings on the image link above that start 'Do not display......'.

Am I missing something here? Maybe I am not installing the correct .adm file. Anyone else having a problem?
Avatar of kzabbott
kzabbott
Flag of United States of America image

Check your DNS on both servers and make sure you are using Active Directory Integrated Zones, and that you have your Zone Transfers set up correctly.  You may need to manually create the zones on the new server for them to then populate from the existing server.
Sorry - was replying to  a different question - slip of the mouse!
OK  - to your issue, while I am using WSUS 3 (and would recommend you update!), I think the .adm file you need is WUAU.adm  - It's available on every XP SP2 machine in the WINDOWS\INF folder.
Additionally, you can find this file on the Windows Server Update Services (WSUS) server itself.  Browse to the the %ProgramFiles%\Update Services\Selfupdate\au\x86 folder and locate the wucltui.cab file under your language folder (en=English).  Open the wucltui.cab cabinet file to find the updated wuau.adm file.
You can also download All Group Policy ADM Files directly from http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en
Avatar of nstand
nstand

ASKER

Thanks kzabbott, those were the files I have already downloaded. I will try the wucltui.cab file today. Is XP SP2 a requirement to use this additional GPO settngs?

I am going to be upgrading from WSUS2 to 3 very soon. Believe it or not I am still in the process of migrating users from SUS to WSUS (and running out of time!)!!
Avatar of nstand

ASKER

Hi kzabbott, unfortunatley even on a fresh XPSP2 build and on my WSUS2.0 server I dont see an .adm file that matches what I am looking for. Is it possible for you to copy the contents of the file on here?
ASKER CERTIFIED SOLUTION
Avatar of kzabbott
kzabbott
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of nstand

ASKER

Thanks, yeah I am doing the import, no matter what file I use, this one included I still dont see the very top two configurable options shown in this image:
http://www.microsoft.com/library/media/1033/technet/images/community/columns/sectip/local_group_obj_editor_toprop.JPG
You know what?  I think we are barking up the wrong tree - these policies are not part of the wuau.adm file, but part of the Windows XP SP2 administrative templates.  If you have not added the adm files for XP2, do that and these options should then appear.  Also note your client machines must be running at least Microsoft Windows XP Professional with SP2 for this option to appear anyway:

(excerpt from http://technet.microsoft.com/en-us/library/bb457141.aspx):

In computers running Windows XP with SP2, a new Install Updates and Shutdown option is displayed in the Shut Down Windows and Turn Off Computer dialog boxes. When updates have been downloaded and are ready to install, Windows shows the new Install Updates and Shutdown option as the default choice and marks it with the Windows Security shield, which indicates that this is a security recommendation. This option provides ease of management for clients configured to run Automatic Updates. See Windows Install Updates and Shutdown Option, later in this document.

SP2 provides new policy settings that you can use to manage the Install Updates and Shut Down option to control whether Install Updates and Shut Down is displayed or is the default option for the Automatic Updates feature, as described in Controlling the Install Updates and Shutdown Feature, later in this document.
===============

HOWEVER: if what you are wanting is for the "Install Updates and Shut Down" to be the default, then you do not want/need to confifgure these anyway!

If the clients are XP Pro SP2 then this will be the default unless you configure it otherwise using one of these two policies.  I have NOT configured either of these, and "Install Updates and Shut Down" is the default for all of my clients.

Zachary




Search for %SystemRoot%\inf\system.adm in a fully patched XP SP2 machine or 2003 SP1 server.

This is the default if you do not configure the policy, but notice "Note that this policy setting has no impact if the Computer Configuration\Administrative Templates\Windows Components\Windows Update\Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box policy setting is enabled."

Supported at least Microsoft Windows XP Professional with SP2

Regards