Solved

Where is the automatic update option in Comnptuers AD OU

Posted on 2008-06-12
7
292 Views
Last Modified: 2010-03-17
Hi,

It seems when I put a new workstation/server onto our network and join it to the domain it automatically changes the auto update sections in the control panel, to auto update at a certain time. When I try to change it it's grayed out. It's says that the option in controlled by a group policy. The problem is that we have some development servers that we don't want to update automatically.

I don;t mind it doing it for the workstations but I'd like to change it for DCs and other servers.

Can you help?

0
Comment
Question by:wannabecraig
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 1

Expert Comment

by:gavbell
ID: 21767326
Hi You Can set the automatic update option in group policy and create a group with all of the servers that you dont want to be updated to me a member of the group then when applying the Group Policy Object you can deny it from applying to the group with your servers in.
If you like I can e-mail you a spreadsheet detailing all of the GPO'S in telling you what they do and where to find them.
Many Thanks
Gav
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 21767340
Hi,

I was going to create another OU, called servers of something like that. But I think the policy that forces the auto-update is at the top level. So I need to know where to find it first or it will just push the policy down to the newly created OU.
0
 
LVL 1

Accepted Solution

by:
gavbell earned 250 total points
ID: 21767423
HI
You can do that create a Group Policy Object then right click the OU and select Link to Existing GPO.
If you are editting the Default Domain Policy that would be automatically applied but I would go with the option of adding servers into a group to deny the policy to that group just be sure that you dont apply this to the servers.
Hope this helps
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 1

Author Comment

by:wannabecraig
ID: 21767446
I have created the new OU. When I go to the properties of it and then to Group Policy Management it tells me that it's linked to the default domain policy. This is where the auto-update in enabled I think. How do I disable the link?
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 21767454
Sorry, it's not linked, it inherits from the group policy. Need to make it so that it does not inherit.
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 21767487
Actually I found it. There is an option to Block inheritance. How can I test this?
0
 
LVL 1

Expert Comment

by:gavbell
ID: 21767763
if you click on the group policy object then the delegation tab and select advanced at the botton right hand side you can select deny for "apply group policy" for that specific group that you have the servers in.
To test I would add a pc into that group and then deny for the test group and apply to a test OU (just link the test OU to the group policy object.
Cheers
Gav
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article runs through the process of deploying a single EXE application selectively to a group of user.
This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question