asked on

Where is the automatic update option in Comnptuers AD OU

Hi,

It seems when I put a new workstation/server onto our network and join it to the domain it automatically changes the auto update sections in the control panel, to auto update at a certain time. When I try to change it it's grayed out. It's says that the option in controlled by a group policy. The problem is that we have some development servers that we don't want to update automatically.

I don;t mind it doing it for the workstations but I'd like to change it for DCs and other servers.

Can you help?

gavbell

Hi You Can set the automatic update option in group policy and create a group with all of the servers that you dont want to be updated to me a member of the group then when applying the Group Policy Object you can deny it from applying to the group with your servers in.
If you like I can e-mail you a spreadsheet detailing all of the GPO'S in telling you what they do and where to find them.
Many Thanks
Gav

wannabecraig

ASKER

Hi,

I was going to create another OU, called servers of something like that. But I think the policy that forces the auto-update is at the top level. So I need to know where to find it first or it will just push the policy down to the newly created OU.

ASKER CERTIFIED SOLUTION

gavbell

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

wannabecraig

ASKER

I have created the new OU. When I go to the properties of it and then to Group Policy Management it tells me that it's linked to the default domain policy. This is where the auto-update in enabled I think. How do I disable the link?

wannabecraig

ASKER

Sorry, it's not linked, it inherits from the group policy. Need to make it so that it does not inherit.

wannabecraig

ASKER

Actually I found it. There is an option to Block inheritance. How can I test this?

gavbell

if you click on the group policy object then the delegation tab and select advanced at the botton right hand side you can select deny for "apply group policy" for that specific group that you have the servers in.
To test I would add a pc into that group and then deny for the test group and apply to a test OU (just link the test OU to the group policy object.
Cheers
Gav