Solved

Enable Windows Update in Domain Security Policy

Posted on 2011-09-07
3
251 Views
Last Modified: 2012-05-12
A previous employee configured the Domain Security Policy to block workstations from accessing Windows Update.  We are running WSUS but the boss now wants employes to be able to install updates on their own if they wish.

I have followed the instructions here ( http://technet.microsoft.com/en-us/library/cc775792%28WS.10%29.aspx ) and Turn off access to all Windows Update features was enabled in the Computer Configuration section.  I set it to Not configured.  Ran a gpupdate and rebooted one client (XP SP3) and still cannot access windows Update from that workstation.

0
Comment
Question by:MERCOMMS
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36498120
I would explain to your boss that allowing/relying your users to use windows update on their own is BAD practice.

Since you are running WSUS, there should be no need to allow users to update via windows update. You could, however, enable the setting "Allow non-administrators to receive update notifications" allowing users to install updates received from your WSUS.
0
 

Author Comment

by:MERCOMMS
ID: 36561052
We have technicians that are on the road, sometimes for up to three weeks at a time, and while on the road their laptops cannot connect to the WSUS server.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 36561222
Create a separate GPO for these laptops and change the "Specify intranet Microsoft Update service location" to NULL(blank).


They will then go to Microsoft Update for windows updates.
0

Featured Post

Space-Age Communications Transitions to DevOps

ViaSat, a global provider of satellite and wireless communications, securely connects businesses, governments, and organizations to the Internet. Learn how ViaSat’s Network Solutions Engineer, drove the transition from a traditional network support to a DevOps-centric model.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question