[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

WSUS group policy

Posted on 2008-10-08
3
Medium Priority
?
334 Views
Last Modified: 2010-04-18
Hi I have several organisational units in which I would like to apply the WSUS Group Policy to.

When I apply the policy it doesnt work, but when I create a new policy that isnt linked to OU (underneath the default dc pol) it does work.

How can I fix this?
0
Comment
Question by:Dan560
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 39

Expert Comment

by:ChiefIT
ID: 22667405
Hi Dan:

A common mistake made when applying group policy is some folks try to link the policy to the Users and Computers folders.

Both of those folders are CN folders, not OU folders. GP will not work on CN folders. So, you have to link your GP settings onto an OU folder. To do so, right click under ADUC and select create a new OU. Drag your clients into these folders, then apply your policy.
0
 
LVL 2

Author Comment

by:Dan560
ID: 22667480
Let me explain my setup to you as I think I have done this.
In active diretory users and computers I have 4 OU's,
admins
customer
sales
support
Now I have created a gpo for customers, and configured the wsus policy, but this policy doesnt come in to affect with wsus, I mean for example I can add a option in gp to change the desktop background and it works for all users under customers, but it wont configure Windows update. I created a policy called windows update services by right clicking company.lan in group policy editor and then configuring windows update, this then seems to work which is great but it configures the policy for the whole domain.
0
 
LVL 39

Accepted Solution

by:
ChiefIT earned 2000 total points
ID: 22673610
It sounds like you are being overridden by domain policy:

Domain policy will override the OU. Are you sure you don't have a domain policy configured for WSUS. When you configured the site policy, it overrode the domain policy. So, the site policy worked but the OU policy didn't becase of the domain policy. You might look at GPMC to see what the settings are for your default domain policy.

POLICY INHERETENCE:
http://technet.microsoft.com/en-us/library/cc739343.aspx
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question