Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Where is the automatic update option in Comnptuers AD OU

Posted on 2008-06-12
7
Medium Priority
?
305 Views
Last Modified: 2010-03-17
Hi,

It seems when I put a new workstation/server onto our network and join it to the domain it automatically changes the auto update sections in the control panel, to auto update at a certain time. When I try to change it it's grayed out. It's says that the option in controlled by a group policy. The problem is that we have some development servers that we don't want to update automatically.

I don;t mind it doing it for the workstations but I'd like to change it for DCs and other servers.

Can you help?

0
Comment
Question by:wannabecraig
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 1

Expert Comment

by:gavbell
ID: 21767326
Hi You Can set the automatic update option in group policy and create a group with all of the servers that you dont want to be updated to me a member of the group then when applying the Group Policy Object you can deny it from applying to the group with your servers in.
If you like I can e-mail you a spreadsheet detailing all of the GPO'S in telling you what they do and where to find them.
Many Thanks
Gav
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 21767340
Hi,

I was going to create another OU, called servers of something like that. But I think the policy that forces the auto-update is at the top level. So I need to know where to find it first or it will just push the policy down to the newly created OU.
0
 
LVL 1

Accepted Solution

by:
gavbell earned 1000 total points
ID: 21767423
HI
You can do that create a Group Policy Object then right click the OU and select Link to Existing GPO.
If you are editting the Default Domain Policy that would be automatically applied but I would go with the option of adding servers into a group to deny the policy to that group just be sure that you dont apply this to the servers.
Hope this helps
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 1

Author Comment

by:wannabecraig
ID: 21767446
I have created the new OU. When I go to the properties of it and then to Group Policy Management it tells me that it's linked to the default domain policy. This is where the auto-update in enabled I think. How do I disable the link?
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 21767454
Sorry, it's not linked, it inherits from the group policy. Need to make it so that it does not inherit.
0
 
LVL 1

Author Comment

by:wannabecraig
ID: 21767487
Actually I found it. There is an option to Block inheritance. How can I test this?
0
 
LVL 1

Expert Comment

by:gavbell
ID: 21767763
if you click on the group policy object then the delegation tab and select advanced at the botton right hand side you can select deny for "apply group policy" for that specific group that you have the servers in.
To test I would add a pc into that group and then deny for the test group and apply to a test OU (just link the test OU to the group policy object.
Cheers
Gav
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question