High security type GPO w/ MSI install disabled and using WSUS2.0 to update machines

Posted on 2007-10-09
Last Modified: 2013-11-14
GPO- locked down GPO with MSI installed disabled
OS- XP pro
server(s) WSUS2.0  /   win2k3

My question is this, we have disabled MSI install in the GPO, will that stop WSUS 2.0 from updating the machines?

WSUS will be downloading updates to itself and installing from there.
Question by:knightdogs
    LVL 3

    Expert Comment

    It should not! Is there a particular reason you are disabling MSI's though?

    LVL 32

    Accepted Solution

    Depending on the group policy applied - I would think that this setting:

    Computer Config\Admin. Templates\Windows Components\Windows Installer\Disable Windows Installer

    would only disable user-initiated installs - not WSUS - as the description states:

    This setting can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator.

    So - you want the setting on "for non-managed apps only"
    LVL 32

    Expert Comment

    Hope that was helpful.
    Thank you.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    Suggested Solutions

    Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now