Solved

WSUS group policy

Posted on 2008-10-08
3
324 Views
Last Modified: 2010-04-18
Hi I have several organisational units in which I would like to apply the WSUS Group Policy to.

When I apply the policy it doesnt work, but when I create a new policy that isnt linked to OU (underneath the default dc pol) it does work.

How can I fix this?
0
Comment
Question by:Dan560
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 38

Expert Comment

by:ChiefIT
ID: 22667405
Hi Dan:

A common mistake made when applying group policy is some folks try to link the policy to the Users and Computers folders.

Both of those folders are CN folders, not OU folders. GP will not work on CN folders. So, you have to link your GP settings onto an OU folder. To do so, right click under ADUC and select create a new OU. Drag your clients into these folders, then apply your policy.
0
 
LVL 2

Author Comment

by:Dan560
ID: 22667480
Let me explain my setup to you as I think I have done this.
In active diretory users and computers I have 4 OU's,
admins
customer
sales
support
Now I have created a gpo for customers, and configured the wsus policy, but this policy doesnt come in to affect with wsus, I mean for example I can add a option in gp to change the desktop background and it works for all users under customers, but it wont configure Windows update. I created a policy called windows update services by right clicking company.lan in group policy editor and then configuring windows update, this then seems to work which is great but it configures the policy for the whole domain.
0
 
LVL 38

Accepted Solution

by:
ChiefIT earned 500 total points
ID: 22673610
It sounds like you are being overridden by domain policy:

Domain policy will override the OU. Are you sure you don't have a domain policy configured for WSUS. When you configured the site policy, it overrode the domain policy. So, the site policy worked but the OU policy didn't becase of the domain policy. You might look at GPMC to see what the settings are for your default domain policy.

POLICY INHERETENCE:
http://technet.microsoft.com/en-us/library/cc739343.aspx
0

Featured Post

The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question