Enable Windows Update in Domain Security Policy

A previous employee configured the Domain Security Policy to block workstations from accessing Windows Update.  We are running WSUS but the boss now wants employes to be able to install updates on their own if they wish.

I have followed the instructions here ( http://technet.microsoft.com/en-us/library/cc775792%28WS.10%29.aspx ) and Turn off access to all Windows Update features was enabled in the Computer Configuration section.  I set it to Not configured.  Ran a gpupdate and rebooted one client (XP SP3) and still cannot access windows Update from that workstation.

MERCOMMSAsked:
Who is Participating?
 
DonConnect With a Mentor Network AdministratorCommented:
Create a separate GPO for these laptops and change the "Specify intranet Microsoft Update service location" to NULL(blank).


They will then go to Microsoft Update for windows updates.
0
 
DonNetwork AdministratorCommented:
I would explain to your boss that allowing/relying your users to use windows update on their own is BAD practice.

Since you are running WSUS, there should be no need to allow users to update via windows update. You could, however, enable the setting "Allow non-administrators to receive update notifications" allowing users to install updates received from your WSUS.
0
 
MERCOMMSAuthor Commented:
We have technicians that are on the road, sometimes for up to three weeks at a time, and while on the road their laptops cannot connect to the WSUS server.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.