Solved

WSUS group policy

Posted on 2008-10-08
3
318 Views
Last Modified: 2010-04-18
Hi I have several organisational units in which I would like to apply the WSUS Group Policy to.

When I apply the policy it doesnt work, but when I create a new policy that isnt linked to OU (underneath the default dc pol) it does work.

How can I fix this?
0
Comment
Question by:Dan560
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 38

Expert Comment

by:ChiefIT
ID: 22667405
Hi Dan:

A common mistake made when applying group policy is some folks try to link the policy to the Users and Computers folders.

Both of those folders are CN folders, not OU folders. GP will not work on CN folders. So, you have to link your GP settings onto an OU folder. To do so, right click under ADUC and select create a new OU. Drag your clients into these folders, then apply your policy.
0
 
LVL 2

Author Comment

by:Dan560
ID: 22667480
Let me explain my setup to you as I think I have done this.
In active diretory users and computers I have 4 OU's,
admins
customer
sales
support
Now I have created a gpo for customers, and configured the wsus policy, but this policy doesnt come in to affect with wsus, I mean for example I can add a option in gp to change the desktop background and it works for all users under customers, but it wont configure Windows update. I created a policy called windows update services by right clicking company.lan in group policy editor and then configuring windows update, this then seems to work which is great but it configures the policy for the whole domain.
0
 
LVL 38

Accepted Solution

by:
ChiefIT earned 500 total points
ID: 22673610
It sounds like you are being overridden by domain policy:

Domain policy will override the OU. Are you sure you don't have a domain policy configured for WSUS. When you configured the site policy, it overrode the domain policy. So, the site policy worked but the OU policy didn't becase of the domain policy. You might look at GPMC to see what the settings are for your default domain policy.

POLICY INHERETENCE:
http://technet.microsoft.com/en-us/library/cc739343.aspx
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question