Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Enable Windows Update in Domain Security Policy

Posted on 2011-09-07
3
Medium Priority
?
276 Views
Last Modified: 2012-05-12
A previous employee configured the Domain Security Policy to block workstations from accessing Windows Update.  We are running WSUS but the boss now wants employes to be able to install updates on their own if they wish.

I have followed the instructions here ( http://technet.microsoft.com/en-us/library/cc775792%28WS.10%29.aspx ) and Turn off access to all Windows Update features was enabled in the Computer Configuration section.  I set it to Not configured.  Ran a gpupdate and rebooted one client (XP SP3) and still cannot access windows Update from that workstation.

0
Comment
Question by:MERCOMMS
  • 2
3 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36498120
I would explain to your boss that allowing/relying your users to use windows update on their own is BAD practice.

Since you are running WSUS, there should be no need to allow users to update via windows update. You could, however, enable the setting "Allow non-administrators to receive update notifications" allowing users to install updates received from your WSUS.
0
 

Author Comment

by:MERCOMMS
ID: 36561052
We have technicians that are on the road, sometimes for up to three weeks at a time, and while on the road their laptops cannot connect to the WSUS server.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 1000 total points
ID: 36561222
Create a separate GPO for these laptops and change the "Specify intranet Microsoft Update service location" to NULL(blank).


They will then go to Microsoft Update for windows updates.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Kernel Data Recovery is a renowned Data Recovery solution provider which offers wide range of softwares for both enterprise and home users with its cost-effective solutions. Let's have a quick overview of the journey and data recovery tools range he…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question