?
Solved

WSUS group policy

Posted on 2008-10-08
3
Medium Priority
?
328 Views
Last Modified: 2010-04-18
Hi I have several organisational units in which I would like to apply the WSUS Group Policy to.

When I apply the policy it doesnt work, but when I create a new policy that isnt linked to OU (underneath the default dc pol) it does work.

How can I fix this?
0
Comment
Question by:Dan560
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 39

Expert Comment

by:ChiefIT
ID: 22667405
Hi Dan:

A common mistake made when applying group policy is some folks try to link the policy to the Users and Computers folders.

Both of those folders are CN folders, not OU folders. GP will not work on CN folders. So, you have to link your GP settings onto an OU folder. To do so, right click under ADUC and select create a new OU. Drag your clients into these folders, then apply your policy.
0
 
LVL 2

Author Comment

by:Dan560
ID: 22667480
Let me explain my setup to you as I think I have done this.
In active diretory users and computers I have 4 OU's,
admins
customer
sales
support
Now I have created a gpo for customers, and configured the wsus policy, but this policy doesnt come in to affect with wsus, I mean for example I can add a option in gp to change the desktop background and it works for all users under customers, but it wont configure Windows update. I created a policy called windows update services by right clicking company.lan in group policy editor and then configuring windows update, this then seems to work which is great but it configures the policy for the whole domain.
0
 
LVL 39

Accepted Solution

by:
ChiefIT earned 2000 total points
ID: 22673610
It sounds like you are being overridden by domain policy:

Domain policy will override the OU. Are you sure you don't have a domain policy configured for WSUS. When you configured the site policy, it overrode the domain policy. So, the site policy worked but the OU policy didn't becase of the domain policy. You might look at GPMC to see what the settings are for your default domain policy.

POLICY INHERETENCE:
http://technet.microsoft.com/en-us/library/cc739343.aspx
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question