Solved

I have a user who is not blocked from getting into Windows Update in XP.  Why?

Posted on 2009-04-06
6
165 Views
Last Modified: 2013-12-04
We have group policy defining Windows Update settings.  Users are also unable to go into Windows Update in Windows XP Security Center -- the options are grayed out.  

For some reason, one of our staff is not restricted from going into Windows Update.  Troubleshooting:  made sure she had a unique SID, and did gpupdate /force and rebooted.

Any suggestions?  


0
Comment
Question by:sswickard
6 Comments
 
LVL 10

Expert Comment

by:Darylx
Comment Utility
Install group policy management console if you don't already have it.  Run the Group Policy Results wizard to make sure the policy is applying to her.  This will also tell you if you have any other policy conflicting with that setting for her.

You could also try adding her user account to the GPO permissions list and giving her read and apply policy permissions.  I've had GPOs in the past that 'should' apply to someone (by way of their group membership) but for some unknown reason, weren't applied.  Adding the user account to the GPO fixed it.
0
 
LVL 1

Expert Comment

by:Jaduff
Comment Utility
Could be a profile problem, with the GPO settings not being correctly stored in the user's profile. Try deleting the user's profile (or renaming it for testing purposes) and see if a new profile corrects the problem.
0
 

Author Comment

by:sswickard
Comment Utility
Hi... thanks, but we already deleted her profile.  I will try the suggestions in the first comment box.
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 66

Expert Comment

by:johnb6767
Comment Utility
start>run>rsop.msc

Is the policy applied on her machine?
0
 
LVL 1

Accepted Solution

by:
Jaduff earned 500 total points
Comment Utility
Try movong the machine to a different OU, gpupdate, then bring it back to the original OU.
Second option is to remove the machine from the domainqn then re-add it.
0
 

Author Closing Comment

by:sswickard
Comment Utility
This prompted me to get into AD.  I found the workstation was in the generic Computers container, so it was not receiving Group Policy.  That has now been corrected. Thanks!
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now