Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2476
  • Last Modified:

WSUS Group Policy - Install on Shutdown

I am trying to configure a WSUS (v2) Group Policy Object so include the Shutdown and Install patches as the default shutdown/log off display message as described in this article:

http://www.microsoft.com/technet/community/columns/sectip/st0506.mspx

And as shown in this image as 'Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box'

http://www.microsoft.com/library/media/1033/technet/images/community/columns/sectip/local_group_obj_editor_toprop.JPG

Now the issue I am having is the WSUS.adm file I am using doesnt have this setting. I have tried to download the correct file and this looks like the latest release:
http://www.microsoft.com/downloads/details.aspx?familyid=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en

But when I import the settings I do not see the 2 settings on the image link above that start 'Do not display......'.

Am I missing something here? Maybe I am not installing the correct .adm file. Anyone else having a problem?
0
nstand
Asked:
nstand
  • 5
  • 3
1 Solution
 
kzabbottSenior Systems AdministratorCommented:
Check your DNS on both servers and make sure you are using Active Directory Integrated Zones, and that you have your Zone Transfers set up correctly.  You may need to manually create the zones on the new server for them to then populate from the existing server.
0
 
kzabbottSenior Systems AdministratorCommented:
Sorry - was replying to  a different question - slip of the mouse!
0
 
kzabbottSenior Systems AdministratorCommented:
OK  - to your issue, while I am using WSUS 3 (and would recommend you update!), I think the .adm file you need is WUAU.adm  - It's available on every XP SP2 machine in the WINDOWS\INF folder.
Additionally, you can find this file on the Windows Server Update Services (WSUS) server itself.  Browse to the the %ProgramFiles%\Update Services\Selfupdate\au\x86 folder and locate the wucltui.cab file under your language folder (en=English).  Open the wucltui.cab cabinet file to find the updated wuau.adm file.
You can also download All Group Policy ADM Files directly from http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
nstandAuthor Commented:
Thanks kzabbott, those were the files I have already downloaded. I will try the wucltui.cab file today. Is XP SP2 a requirement to use this additional GPO settngs?

I am going to be upgrading from WSUS2 to 3 very soon. Believe it or not I am still in the process of migrating users from SUS to WSUS (and running out of time!)!!
0
 
nstandAuthor Commented:
Hi kzabbott, unfortunatley even on a fresh XPSP2 build and on my WSUS2.0 server I dont see an .adm file that matches what I am looking for. Is it possible for you to copy the contents of the file on here?
0
 
kzabbottSenior Systems AdministratorCommented:
Heres the contents of the wuau.adm file I have from my machine at home, which has the same date stamp as the one at the office; just copy the text below into notepad and save as wuau.adm, then import the adm file into whichever GP you are wanting to edit.  You are remembering this step, no?  You need to right-click the Admininstrative Templates folder and click Add/Remove Template, then browse to the template you have saved and add it.  If asked to overwrite an existing template, say yes.

;=============wuau.adm=============
#if version <= 2
#endif

CLASS MACHINE
CATEGORY !!WindowsComponents
    CATEGORY !!WindowsUpdateCat

          POLICY !!AutoUpdateCfg
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!AutoUpdateCfg_Help
            #endif
            VALUENAME "NoAutoUpdate"
                VALUEON  NUMERIC 0
                VALUEOFF NUMERIC 1

            PART !!AutoUpdateMode DROPDOWNLIST REQUIRED
                VALUENAME "AUOptions"
                ITEMLIST
                  NAME !!AutoUpdateModeNotify          VALUE NUMERIC 2
                  NAME !!AutoUpdateModeDownload          VALUE NUMERIC 3 DEFAULT
                  NAME !!AutoUpdateModeAuto          VALUE NUMERIC 4
                  NAME !!AutoUpdateModeAdminChooses   VALUE NUMERIC 5
                END ITEMLIST
            END PART

            Part !!AutoUpdateSchIntro1 TEXT
            END PART

            Part !!AutoUpdateSchIntro2 TEXT
            END PART

            Part !!AutoUpdateSchDay DROPDOWNLIST REQUIRED
                VALUENAME "ScheduledInstallDay"
                ITEMLIST
                  NAME !!AutoUpdateSchDay_Everyday    VALUE NUMERIC 0 DEFAULT                  
                  NAME !!AutoUpdateSchDay_Sunday          VALUE NUMERIC 1
                  NAME !!AutoUpdateSchDay_Monday          VALUE NUMERIC 2
                  NAME !!AutoUpdateSchDay_Tuesday          VALUE NUMERIC 3
                  NAME !!AutoUpdateSchDay_Wednesday   VALUE NUMERIC 4
                  NAME !!AutoUpdateSchDay_Thursday    VALUE NUMERIC 5
                  NAME !!AutoUpdateSchDay_Friday          VALUE NUMERIC 6
                  NAME !!AutoUpdateSchDay_Saturday    VALUE NUMERIC 7
                END ITEMLIST
            END PART

            Part !!AutoUpdateSchTime DROPDOWNLIST REQUIRED
                VALUENAME "ScheduledInstallTime"
                ITEMLIST
                  NAME !!AutoUpdateSchTime0   VALUE NUMERIC 0
                  NAME !!AutoUpdateSchTime1   VALUE NUMERIC 1
                  NAME !!AutoUpdateSchTime2   VALUE NUMERIC 2
                  NAME !!AutoUpdateSchTime3   VALUE NUMERIC 3 DEFAULT                  
                  NAME !!AutoUpdateSchTime4   VALUE NUMERIC 4
                  NAME !!AutoUpdateSchTime5   VALUE NUMERIC 5
                  NAME !!AutoUpdateSchTime6   VALUE NUMERIC 6
                  NAME !!AutoUpdateSchTime7   VALUE NUMERIC 7
                  NAME !!AutoUpdateSchTime8   VALUE NUMERIC 8
                  NAME !!AutoUpdateSchTime9   VALUE NUMERIC 9
                  NAME !!AutoUpdateSchTime10  VALUE NUMERIC 10
                  NAME !!AutoUpdateSchTime11  VALUE NUMERIC 11
                  NAME !!AutoUpdateSchTime12  VALUE NUMERIC 12
                  NAME !!AutoUpdateSchTime13  VALUE NUMERIC 13
                  NAME !!AutoUpdateSchTime14  VALUE NUMERIC 14
                  NAME !!AutoUpdateSchTime15  VALUE NUMERIC 15
                  NAME !!AutoUpdateSchTime16  VALUE NUMERIC 16
                  NAME !!AutoUpdateSchTime17  VALUE NUMERIC 17
                  NAME !!AutoUpdateSchTime18  VALUE NUMERIC 18
                  NAME !!AutoUpdateSchTime19  VALUE NUMERIC 19
                  NAME !!AutoUpdateSchTime20  VALUE NUMERIC 20
                  NAME !!AutoUpdateSchTime21  VALUE NUMERIC 21
                  NAME !!AutoUpdateSchTime22  VALUE NUMERIC 22
                  NAME !!AutoUpdateSchTime23  VALUE NUMERIC 23
                END ITEMLIST
            END PART
          END POLICY

          POLICY !!CorpWuURL
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!CorpWuURL_Help
            #endif

            ACTIONLISTON
                KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
                VALUENAME "UseWUServer"
                  VALUE NUMERIC 1
            END ACTIONLISTON

            ACTIONLISTOFF
                KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
                VALUENAME "UseWUServer"
                  VALUE NUMERIC 0
            END ACTIONLISTOFF

            PART !!CorpWUURL_Name EDITTEXT REQUIRED
                VALUENAME "WUServer"
            END PART

            PART !!CorpWUStatusURL_Name EDITTEXT REQUIRED
                VALUENAME "WUStatusServer"
            END PART

            Part !!CorpWUURL_Example TEXT
            END PART
          END POLICY

          POLICY !!TargetGroup_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!TargetGroup_Help
            #endif

            VALUENAME "TargetGroupEnabled"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0

            PART !!TargetGroup_Name      EDITTEXT REQUIRED
                VALUENAME "TargetGroup"
            END PART
          END POLICY

          POLICY !!RescheduleWaitTime_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!RescheduleWaitTime_Help
            #endif

            VALUENAME "RescheduleWaitTimeEnabled"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0

            Part !!RescheduleWaitTime_Minutes1 TEXT
            END PART

            PART !!RescheduleWaitTime_Minutes2 NUMERIC REQUIRED
                VALUENAME "RescheduleWaitTime"
                MIN 1
                MAX 60
                DEFAULT 1
            END PART
          END POLICY

          POLICY !!NoAutoRebootWithLoggedOnUsers_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!NoAutoRebootWithLoggedOnUsers_Help
            #endif

            VALUENAME "NoAutoRebootWithLoggedOnUsers"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0
          END POLICY

          POLICY !!DetectionFrequency_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!DetectionFrequency_Help
            #endif

            VALUENAME "DetectionFrequencyEnabled"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0

            Part !!DetectionFrequency_Hour1 TEXT
            END PART

            PART !!DetectionFrequency_Hour2 NUMERIC REQUIRED
                VALUENAME "DetectionFrequency"
                MIN 1
                MAX 22
                DEFAULT 22
            END PART
          END POLICY

          POLICY !!ImmediateInstall_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!ImmediateInstall_Help
            #endif

            VALUENAME "AutoInstallMinorUpdates"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0
          END POLICY

          POLICY !!RebootWarningTimeout_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!RebootWarningTimeout_Help
            #endif

            VALUENAME "RebootWarningTimeoutEnabled"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0

            Part !!RebootWarningTimeout_Minutes1 TEXT
            END PART

            Part !!RebootWarningTimeout_Minutes2 TEXT
            END PART

            PART !!RebootWarningTimeout_Minutes3 NUMERIC REQUIRED
                VALUENAME "RebootWarningTimeout"
                MIN 1
                MAX 30
                DEFAULT 5
            END PART
          END POLICY

          POLICY !!RebootRelaunchTimeout_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!RebootRelaunchTimeout_Help
            #endif

            VALUENAME "RebootRelaunchTimeoutEnabled"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0

            Part !!RebootRelaunchTimeout_Minutes1 TEXT
            END PART

            Part !!RebootRelaunchTimeout_Minutes2 TEXT
            END PART

            PART !!RebootRelaunchTimeout_Minutes3 NUMERIC REQUIRED
                VALUENAME "RebootRelaunchTimeout"
                MIN 1
                MAX 1440
                DEFAULT 10
            END PART
          END POLICY

          POLICY !!ElevateNonAdmins_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!ElevateNonAdmins_Help
            #endif

            VALUENAME "ElevateNonAdmins"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0
          END POLICY

          POLICY !!IncludeRecommendedUpdates_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowsVista
            #endif

            #if version >= 3
                EXPLAIN !!IncludeRecommendedUpdates_Help
            #endif

            VALUENAME "IncludeRecommendedUpdates"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0
          END POLICY

          POLICY !!AUPowerManagement_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate\AU"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowsVista
            #endif

            #if version >= 3
                EXPLAIN !!AUPowerManagement_Help
            #endif

            VALUENAME "AUPowerManagement"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0
          END POLICY

          POLICY !!TrustedPublisher_Title
            KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate"
            #if version >= 4
                SUPPORTED !!SUPPORTED_WindowXPSP1
            #endif

            #if version >= 3
                EXPLAIN !!TrustedPublisher_Help
            #endif

            VALUENAME "AcceptTrustedPublisherCerts"
                VALUEON  NUMERIC 1
                VALUEOFF NUMERIC 0
          END POLICY

    END CATEGORY ;; WindowsUpdateCat
END CATEGORY ;; WindowsComponents

[strings]
WindowsComponents="Windows Components"
WindowsUpdateCat="Windows Update"
SUPPORTED_WindowXPSP1="Windows Server 2003, XP SP1, 2000 SP3"
SUPPORTED_WindowsVista="At least Microsoft Windows Vista"

AutoUpdateCfg="Configure Automatic Updates"
AutoUpdateCfg_Help="Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updating service.\n\nThis setting lets you specify if automatic updates are enabled on this computer. If the service is enabled, you must select one of the four options in the Group Policy Setting:\n\n2 = Notify before downloading any updates and notify again before installing them.\n\nWhen Windows finds updates that apply to this computer, an icon appears in the status area with a message that updates are ready to be downloaded. Clicking the icon or message provides the option to select the specific updates to download. Windows then downloads the selected updates in the background. When the download is complete, the icon appears in the status area again, with notification that the updates are ready to be installed. Clicking the icon or message provides the option to select which updates to install.\n\n3 = (Default setting) Download the updates automatically and notify when they are ready to be installed\n\nWindows finds updates that apply to your computer and downloads these updates in the background (the user is not notified or interrupted during this process). When the download is complete, the icon appears in the status area, with notification that the updates are ready to be installed. Clicking the icon or message provides the option to select which updates to install.\n\n4 = Automatically download updates and install them on the schedule specified below\n\nSpecify the schedule using the options in the Group Policy Setting. If no schedule is specified, the default schedule for all installations will be everyday at 3:00 AM. If any of the updates require a restart to complete the installation, Windows will restart the computer automatically. (If a user is logged on to the computer when Windows is ready to restart, the user will be notified and given the option to delay the restart.)\n\n5 = Allow local administrators to select the configuration mode that Automatic Updates should notify and install updates\n\nWith this option, the local administrators will be allowed to use the Automatic Updates control panel to select a configuration option of their choice. For example they can choose their own scheduled installation time. Local administrators will not be allowed to disable Automatic Updates' configuration.\n\nTo use this setting, click Enabled, and then select one of the options (2, 3, 4 or 5). If you select 4, you can set a recurring schedule (if no schedule is specified, all installations will occur everyday at 3:00 AM).\n\nIf the status is set to Enabled, Windows recognizes when this computer is online and uses its Internet connection to search the Windows Update Web site for updates that apply to this computer.\n\nIf the status is set to Disabled, any updates that are available on the Windows Update Web site must be downloaded and installed manually by going to http://windowsupdate.microsoft.com.\n\nIf the status is set to Not Configured, use of Automatic Updates is not specified at the Group Policy level. However, an administrator can still configure Automatic Updates through Control Panel."

AutoUpdateMode="Configure automatic updating:"
AutoUpdateModeNotify="2 - Notify for download and notify for install"
AutoUpdateModeDownload="3 - Auto download and notify for install"
AutoUpdateModeAuto="4 - Auto download and schedule the install"
AutoUpdateModeAdminChooses="5 - Allow local admin to choose setting"
AutoUpdateSchIntro1="The following settings are only required"
AutoUpdateSchIntro2="and applicable if 4 is selected."
AutoUpdateSchDay="Scheduled install day: "

AutoUpdateSchDay_Everyday="0 - Every day"
AutoUpdateSchDay_Sunday="1 - Every Sunday"
AutoUpdateSchDay_Monday="2 - Every Monday"
AutoUpdateSchDay_Tuesday="3 - Every Tuesday"
AutoUpdateSchDay_Wednesday="4 - Every Wednesday"
AutoUpdateSchDay_Thursday="5 - Every Thursday"
AutoUpdateSchDay_Friday="6 - Every Friday"
AutoUpdateSchDay_Saturday="7 - Every Saturday"

AutoUpdateSchTime="Scheduled install time:"

AutoUpdateSchTime0="00:00"
AutoUpdateSchTime1="01:00"
AutoUpdateSchTime2="02:00"
AutoUpdateSchTime3="03:00"
AutoUpdateSchTime4="04:00"
AutoUpdateSchTime5="05:00"
AutoUpdateSchTime6="06:00"
AutoUpdateSchTime7="07:00"
AutoUpdateSchTime8="08:00"
AutoUpdateSchTime9="09:00"
AutoUpdateSchTime10="10:00"
AutoUpdateSchTime11="11:00"
AutoUpdateSchTime12="12:00"
AutoUpdateSchTime13="13:00"
AutoUpdateSchTime14="14:00"
AutoUpdateSchTime15="15:00"
AutoUpdateSchTime16="16:00"
AutoUpdateSchTime17="17:00"
AutoUpdateSchTime18="18:00"
AutoUpdateSchTime19="19:00"
AutoUpdateSchTime20="20:00"
AutoUpdateSchTime21="21:00"
AutoUpdateSchTime22="22:00"
AutoUpdateSchTime23="23:00"

CorpWuURL="Specify intranet Microsoft update service location"
CorpWUURL_Name="Set the intranet update service for detecting updates:"
CorpWUStatusURL_Name="Set the intranet statistics server:"
CorpWUURL_Example="(example: http://IntranetUpd01)"
CorpWuURL_Help="Specifies an intranet server to host updates from the Microsoft Update Web sites. You can then use this update service to automatically update computers on your network.\n\nThis setting lets you specify a server on your network to function as an internal update service. The Automatic Updates client will search this service for updates that apply to the computers on your network.\n\nTo use this setting, you must set two servername values: the server from which the Automatic Updates client detects and downloads updates, and the server to which updated workstations upload statistics. You can set both values to be the same server.\n\nIf the status is set to Enabled, the Automatic Updates client connects to the specified intranet Microsoft update service, instead of Windows Update, to search for and download updates. Enabling this setting means that end users in your organization don't have to go through a firewall to get updates, and it gives you the opportunity to test updates before deploying them.\n\nIf the status is set to Disabled or Not Configured, and if Automatic Updates is not disabled by policy or user preference, the Automatic Updates client connects directly to the Windows Update site on the Internet.\n\nNote: If the "Configure Automatic Updates" policy is disabled, then this policy has no effect."

TargetGroup_Title="Enable client-side targeting"
TargetGroup_Name="Target group name for this computer"
TargetGroup_Help="Specifies the target group name or names that should be used to receive updates from an intranet Microsoft update service.\n\nIf the status is set to Enabled, the specified target group information is sent to the intranet Microsoft update service which uses it to determine which updates should be deployed to this computer.\n\nIf the intranet Microsoft update service supports multiple target groups this policy can specify multiple group names separated by semicolons. Otherwise, a single group must be specified.\n\nIf the status is set to Disabled or Not Configured, no target group information will be sent to the intranet Microsoft update service.\n\nNote: This policy applies only when the intranet Microsoft update service this computer is directed to is configured to support client-side targeting. If the "Specify intranet Microsoft update service location" policy is disabled or not configured, this policy has no effect."

RescheduleWaitTime_Title="Reschedule Automatic Updates scheduled installations"
RescheduleWaitTime_Minutes1="Wait after system"
RescheduleWaitTime_Minutes2="startup (minutes): "
RescheduleWaitTime_Help="Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installation that was missed previously.\n\nIf the status is set to Enabled, a scheduled installation that did not take place earlier will occur the specified number of minutes after the computer is next started.\n\nIf the status is set to Disabled, a missed scheduled installation will occur with the next scheduled installation.\n\nIf the status is set to Not Configured, a missed scheduled installation will occur one minute after the computer is next started.\n\nNote: This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

NoAutoRebootWithLoggedOnUsers_Title="No auto-restart for scheduled Automatic Updates installations"
NoAutoRebootWithLoggedOnUsers_Help="Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causing the computer to restart automatically.\n\nIf the status is set to Enabled, Automatic Updates will not restart a computer automatically during a scheduled installation if a user is logged in to the computer. Instead, Automatic Updates will notify the user to restart the computer.\n\nBe aware that the computer needs to be restarted for the updates to take effect.\n\nIf the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation.\n\nNote: This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

DetectionFrequency_Title="Automatic Updates detection frequency"
DetectionFrequency_Hour1="Check for updates at the following"
DetectionFrequency_Hour2="interval (hours): "
DetectionFrequency_Help="Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the hours specified here minus zero to twenty percent of the hours specified. For example, if this policy is used to specify a 20 hour detection frequency, then all clients to which this policy is applied will check for updates anywhere between 16 and 20 hours.\n\nIf the status is set to Enabled, Windows will check for available updates at the specified interval.\n\nIf the status is set to Disabled or Not Configured, Windows will check for available updates at the default interval of 22 hours.\n\nNote: The "Specify intranet Microsoft update service location" setting must be enabled for this policy to have effect.\n\nNote: If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

ImmediateInstall_Title="Allow Automatic Updates immediate installation"
ImmediateInstall_Help="Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows.\n\nIf the status is set to Enabled, Automatic Updates will immediately install these updates once they are downloaded and ready to install.\n\nIf the status is set to Disabled, such updates will not be installed immediately.\n\nNote: If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

RebootWarningTimeout_Title="Delay Restart for scheduled installations"
RebootWarningTimeout_Minutes1="Wait the following period before"
RebootWarningTimeout_Minutes2="proceeding with a scheduled"
RebootWarningTimeout_Minutes3="restart (minutes): "
RebootWarningTimeout_Help="Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart.\n\nIf the status is set to Enabled, a scheduled restart will occur the specified number of minutes after the installation is finished.\n\nIf the status is set to Disabled or Not Configured, the default wait time is 5 minutes.\n\nNote: This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

RebootRelaunchTimeout_Title="Re-prompt for restart with scheduled installations"
RebootRelaunchTimeout_Minutes1="Wait the following period before"
RebootRelaunchTimeout_Minutes2="prompting again with a scheduled"
RebootRelaunchTimeout_Minutes3="restart (minutes): "
RebootRelaunchTimeout_Help="Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart.\n\nIf the status is set to Enabled, a scheduled restart will occur the specified number of minutes after the previous prompt for restart was postponed.\n\nIf the status is set to Disabled or Not Configured, the default interval is 10 minutes.\n\nNote: This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

ElevateNonAdmins_Title="Allow non-administrators to receive update notifications"
ElevateNonAdmins_Help="Specifies whether, when logged on, non-administrative users will receive update notifications based on the configuration settings for Automatic Updates. If Automatic Updates is configured, by policy or locally, to notify the user either before downloading or only before installation, these notifications will be offered to any non-administrator who logs onto the computer.\n\nIf the status is set to Enabled, Automatic Updates will include non-administrators when determining which logged-on user should receive notification.\n\nIf the status is set to Disabled or Not Configured, Automatic Updates will notify only logged-on administrators.\n\nNote: If the "Configure Automatic Updates" policy is disabled, this policy has no effect."

IncludeRecommendedUpdates_Title="Enable recommended updates via Automatic Updates"
IncludeRecommendedUpdates_Help="Specifies whether Automatic Updates will deliver both important as well as recommended updates from the Windows Update update service.\n\nWhen this policy is enabled, Automatic Updates will install recommended updates as well as important updates from Windows Update update service.\n\nWhen disabled or not configured Automatic Updates will continue to deliver important updates if it is already configured to do so."

AuPowerManagement_Title="Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates"
AUPowerManagement_Help="Specifies whether the Windows Update will use the Windows Power Management features to automatically wake up the system from hibernation, if there are updates scheduled for installation.\n\nWindows Update will only automatically wake up the system if Windows Update is configured to install updates automatically. If the system is in hibernation when the scheduled install time occurs and there are updates to be applied, then Windows Update will use the Windows Power management features to automatically wake the system up to install the updates.\n\nWindows update will also wake the system up and install an update if an install deadline occurs.\n\nThe system will not wake unless there are updates to be installed.  If the system is on battery power, when Windows Update wakes it up, it will not install updates and the system will automatically return to hibernation in 2 minutes."

TrustedPublisher_Title="Allow signed content from intranet Microsoft update service location"
TrustedPublisher_Help="Specifies whether Automatic Updates should accept updates signed by entities other than Microsoft when the update is from an intranet Microsoft update services location.\n\nIf set to Enabled, Automatic Updates will accept updates received through an intranet Microsoft update services location if they are signed by a certificate found in the "Trusted Publishers" certificate store of the local machine.\n\nIf set to Disabled, updates from an intranet Microsoft update services location must be signed by Microsoft.\n\nUpdates from a service other than an intranet Microsoft update service must always be signed by Microsoft regardless of whether this policy is Enabled or Disabled."

; These string below are used by Online Help

ADM_TITLE="Group Policy settings for Automatic Updates"
USER="User Configuration"
COMPUTER="Computer Configuration"
cOMPUTER_EXPLAIN="Contains settings that may only be used to configure Computers."
USER_EXPLAIN="Contains settings that may only be used to configure Users."
SUPPORTEDON="Requirements:"

0
 
nstandAuthor Commented:
Thanks, yeah I am doing the import, no matter what file I use, this one included I still dont see the very top two configurable options shown in this image:
http://www.microsoft.com/library/media/1033/technet/images/community/columns/sectip/local_group_obj_editor_toprop.JPG
0
 
kzabbottSenior Systems AdministratorCommented:
You know what?  I think we are barking up the wrong tree - these policies are not part of the wuau.adm file, but part of the Windows XP SP2 administrative templates.  If you have not added the adm files for XP2, do that and these options should then appear.  Also note your client machines must be running at least Microsoft Windows XP Professional with SP2 for this option to appear anyway:

(excerpt from http://technet.microsoft.com/en-us/library/bb457141.aspx):

In computers running Windows XP with SP2, a new Install Updates and Shutdown option is displayed in the Shut Down Windows and Turn Off Computer dialog boxes. When updates have been downloaded and are ready to install, Windows shows the new Install Updates and Shutdown option as the default choice and marks it with the Windows Security shield, which indicates that this is a security recommendation. This option provides ease of management for clients configured to run Automatic Updates. See Windows Install Updates and Shutdown Option, later in this document.

SP2 provides new policy settings that you can use to manage the Install Updates and Shut Down option to control whether Install Updates and Shut Down is displayed or is the default option for the Automatic Updates feature, as described in Controlling the Install Updates and Shutdown Feature, later in this document.
===============

HOWEVER: if what you are wanting is for the "Install Updates and Shut Down" to be the default, then you do not want/need to confifgure these anyway!

If the clients are XP Pro SP2 then this will be the default unless you configure it otherwise using one of these two policies.  I have NOT configured either of these, and "Install Updates and Shut Down" is the default for all of my clients.

Zachary




0
 
Walter PadrónCommented:
Search for %SystemRoot%\inf\system.adm in a fully patched XP SP2 machine or 2003 SP1 server.

This is the default if you do not configure the policy, but notice "Note that this policy setting has no impact if the Computer Configuration\Administrative Templates\Windows Components\Windows Update\Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box policy setting is enabled."

Supported at least Microsoft Windows XP Professional with SP2

Regards
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now