Solved

Windows 2008 GPMC missing service

Posted on 2011-09-27
15
736 Views
Last Modified: 2012-05-12
I want to use Group Policy Management Console on an AD 2008 server to change the start up settings for the Windows system service called "Automatic Updates" service for some Windows XP domain computers.  However, I don't see the service listed in the following location.
(Computer Configuration, Windows Settings, Security Settings, System Services)

I do see a service named "Windows Update" but I'm not sure if changing that service will affect the Automatic Update service on XP.
0
Comment
Question by:AManoux
  • 9
  • 6
15 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712458
Computer Configuration>>>Administrative templates>>>Windows Components>>>Windows Update>>>Configure automatic updates>>>Set to disabled
0
 
LVL 1

Author Comment

by:AManoux
ID: 36712882
Thanks, but I need the location in GPMC where I can specify what the startup type is for the Automatic Updates service; whether it's "Automatic", "Manual" or "Disabled" as well as the security permissions for the service.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712908
What is your specific need for disabling this service?? This is a very uncommon request.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712929
  If you are trying to control users access...

 You can use Group Policy settings to disable both Windows Update and Automatic Updates.

        To disable Windows Update and Automatic Updates by preventing the operating system from being updated through Windows Update, configure Remove access to use all Windows Update features in User Configuration\Administrative Templates\Windows Components\Windows Update.

        To prevent access to Windows Update commands, configure Remove links and access to Windows Update in User Configuration\Administrative Templates\Start Menu and Taskbar.

    You can use Group Policy settings to selectively disable Automatic Updates.

    To do this, enable Windows Automatic Updates in User Configuration\Administrative Templates\System.

http://technet.microsoft.com/en-us/library/bb490846.aspx
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713267
I think you might have become confused along the way.  My question was never around how to disable the Automatic Updates service or prevent it from running.  I just wanted to know where in the GPMC can I find the options to change the start up type like the other services listed under (Computer Configuration, Windows Settings, Security Settings, System Services)
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713330
Only the services that exist on the local client will appear in the GPMC when navigating to this location.


You still didnt answer the question "What is your specific need for disabling this service??"
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713359
Sorry..should have asked "What is your need to change startup type?"
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713376
I don't have any need to disable the service and have no intention of disabling the service.  Why do you keep asking that question?  I actually want to use a GPO to specifically set the service's start up option to "automatic"

So you are saying that the GPMC will only list services that are local to the domain controller which is a Windows 2008 server so I can't control the start up type for the XP service?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713847
What I'm saying is that default for "Automatic Updates" is already "Automatic" there should be no need to create a GPO to modify this. That's why I am asking what is leading you down this path?
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713882
Running into this issue (see link).  Trying to implement the recommended posted fix by Sidarius on July 24th that maintains the security settings for the service.

http://www.windowsreference.com/windows-xp/error-0x80004015-when-automatic-updates-fail-with-wsus-server
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713911
That's what I was trying to get from you :)

use the .bat here instead


http://msmvps.com/blogs/athif/pages/48959.aspx
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713914
Place the .bat into the startup scripts
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713920
We already ran a script on the computers to reset the security descriptors for the service. The issue is resolved temporarily but after a reboot, the security for the service reverts back and the service no longer starts (just like others mentioned in the link I posted).  I need a permanent fix.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 36713937
Ok, just looked the "Windows Update" service on 2008, the service name is wuauserv<<<<which is the same as "Automatic Updates" is on XP.
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713957
Cool. I will try that right now and let you know if it works.
0

Featured Post

Active Directory Webinar

We all know we need to protect and secure our privileges, but where to start? Join Experts Exchange and ManageEngine on Tuesday, April 11, 2017 10:00 AM PDT to learn how to track and secure privileged users in Active Directory.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question