Solved

Enable Windows Update in Domain Security Policy

Posted on 2011-09-07
3
258 Views
Last Modified: 2012-05-12
A previous employee configured the Domain Security Policy to block workstations from accessing Windows Update.  We are running WSUS but the boss now wants employes to be able to install updates on their own if they wish.

I have followed the instructions here ( http://technet.microsoft.com/en-us/library/cc775792%28WS.10%29.aspx ) and Turn off access to all Windows Update features was enabled in the Computer Configuration section.  I set it to Not configured.  Ran a gpupdate and rebooted one client (XP SP3) and still cannot access windows Update from that workstation.

0
Comment
Question by:MERCOMMS
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36498120
I would explain to your boss that allowing/relying your users to use windows update on their own is BAD practice.

Since you are running WSUS, there should be no need to allow users to update via windows update. You could, however, enable the setting "Allow non-administrators to receive update notifications" allowing users to install updates received from your WSUS.
0
 

Author Comment

by:MERCOMMS
ID: 36561052
We have technicians that are on the road, sometimes for up to three weeks at a time, and while on the road their laptops cannot connect to the WSUS server.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 36561222
Create a separate GPO for these laptops and change the "Specify intranet Microsoft Update service location" to NULL(blank).


They will then go to Microsoft Update for windows updates.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question