Solved

Enable Windows Update in Domain Security Policy

Posted on 2011-09-07
3
219 Views
Last Modified: 2012-05-12
A previous employee configured the Domain Security Policy to block workstations from accessing Windows Update.  We are running WSUS but the boss now wants employes to be able to install updates on their own if they wish.

I have followed the instructions here ( http://technet.microsoft.com/en-us/library/cc775792%28WS.10%29.aspx ) and Turn off access to all Windows Update features was enabled in the Computer Configuration section.  I set it to Not configured.  Ran a gpupdate and rebooted one client (XP SP3) and still cannot access windows Update from that workstation.

0
Comment
Question by:MERCOMMS
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36498120
I would explain to your boss that allowing/relying your users to use windows update on their own is BAD practice.

Since you are running WSUS, there should be no need to allow users to update via windows update. You could, however, enable the setting "Allow non-administrators to receive update notifications" allowing users to install updates received from your WSUS.
0
 

Author Comment

by:MERCOMMS
ID: 36561052
We have technicians that are on the road, sometimes for up to three weeks at a time, and while on the road their laptops cannot connect to the WSUS server.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 36561222
Create a separate GPO for these laptops and change the "Specify intranet Microsoft Update service location" to NULL(blank).


They will then go to Microsoft Update for windows updates.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now