Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Windows Update Group Policy for DC and SBS Servers

Posted on 2008-10-02
7
Medium Priority
?
501 Views
Last Modified: 2012-05-05
Hello,

I am trying to confirm that what I am doing is correct and if not to ask for some direction.

The default domain policy says that all systems are to update windows and install automatically. This includes the DC and servers. I don't want this for obvious reasons. I want to be able to download but wait for manual installation on the DC and Servers.

To set this up, I did a Block Inheritance at the Domain Controllers and SBSServers OU's and configured their respective poilicies accordingly.
Is this correct?

Thanks in advance.
0
Comment
Question by:cepolly
  • 3
  • 3
7 Comments
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 400 total points
ID: 22626056
If you do this it will Block ALL policies except those applied directly to the OUs in question - if that what you want then its fine.
0
 
LVL 1

Author Comment

by:cepolly
ID: 22626080
Yes it is. We don't have too many policies that we have implemented.

However, you bring up a good point.
Are there policies inherent to SBS 2003 that I may be blocking inadvertantly?

0
 
LVL 18

Assisted Solution

by:sk_raja_raja
sk_raja_raja earned 1600 total points
ID: 22626173
when i have this same issue,

1.Block inheritance on the DC and server OU and this will block all the policies
2.Create a new policy for updates and link to the DC ans erver OU's
3.Then again link the other policies you need to apply to these ou's

I would suggest linking the GP's is the best way to do this.

0
 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

 
LVL 18

Assisted Solution

by:sk_raja_raja
sk_raja_raja earned 1600 total points
ID: 22626199
in simple you can link the GP's anywhere in the OU...even if you specify block inheritance and say for example it is going to block GP1 and GP2.... then still you can link the GP2 on the same ou and this policy will be applied.

Other workaround you can try is,create a new update policy with settings and link it to the dc and server ou and the enforce the newly create policy....this will work only if your parent policy from top is not enforced.....
0
 
LVL 1

Author Comment

by:cepolly
ID: 22626346
Looks like the linking was the problem. As soon as I removed the linkage, the policies took.

Now if I relink, will I lose the settings that I want? Will the newly link GPO take precedence?
0
 
LVL 18

Accepted Solution

by:
sk_raja_raja earned 1600 total points
ID: 22626407
i dont understand your query..can you be more clear.

just relink the policy and dont enforce
link the newly link gpo and enforce it

hence the settings on the new gp will take precedence....
0
 
LVL 1

Author Comment

by:cepolly
ID: 22626441
You didn't understand what I said exactly but you answered it. :-)

I understand. Thanks for the help.

0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…

783 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question