Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Windows 2008 GPMC missing service

Posted on 2011-09-27
15
Medium Priority
?
753 Views
Last Modified: 2012-05-12
I want to use Group Policy Management Console on an AD 2008 server to change the start up settings for the Windows system service called "Automatic Updates" service for some Windows XP domain computers.  However, I don't see the service listed in the following location.
(Computer Configuration, Windows Settings, Security Settings, System Services)

I do see a service named "Windows Update" but I'm not sure if changing that service will affect the Automatic Update service on XP.
0
Comment
Question by:AManoux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 9
  • 6
15 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712458
Computer Configuration>>>Administrative templates>>>Windows Components>>>Windows Update>>>Configure automatic updates>>>Set to disabled
0
 
LVL 1

Author Comment

by:AManoux
ID: 36712882
Thanks, but I need the location in GPMC where I can specify what the startup type is for the Automatic Updates service; whether it's "Automatic", "Manual" or "Disabled" as well as the security permissions for the service.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712908
What is your specific need for disabling this service?? This is a very uncommon request.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712929
  If you are trying to control users access...

 You can use Group Policy settings to disable both Windows Update and Automatic Updates.

        To disable Windows Update and Automatic Updates by preventing the operating system from being updated through Windows Update, configure Remove access to use all Windows Update features in User Configuration\Administrative Templates\Windows Components\Windows Update.

        To prevent access to Windows Update commands, configure Remove links and access to Windows Update in User Configuration\Administrative Templates\Start Menu and Taskbar.

    You can use Group Policy settings to selectively disable Automatic Updates.

    To do this, enable Windows Automatic Updates in User Configuration\Administrative Templates\System.

http://technet.microsoft.com/en-us/library/bb490846.aspx
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713267
I think you might have become confused along the way.  My question was never around how to disable the Automatic Updates service or prevent it from running.  I just wanted to know where in the GPMC can I find the options to change the start up type like the other services listed under (Computer Configuration, Windows Settings, Security Settings, System Services)
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713330
Only the services that exist on the local client will appear in the GPMC when navigating to this location.


You still didnt answer the question "What is your specific need for disabling this service??"
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713359
Sorry..should have asked "What is your need to change startup type?"
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713376
I don't have any need to disable the service and have no intention of disabling the service.  Why do you keep asking that question?  I actually want to use a GPO to specifically set the service's start up option to "automatic"

So you are saying that the GPMC will only list services that are local to the domain controller which is a Windows 2008 server so I can't control the start up type for the XP service?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713847
What I'm saying is that default for "Automatic Updates" is already "Automatic" there should be no need to create a GPO to modify this. That's why I am asking what is leading you down this path?
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713882
Running into this issue (see link).  Trying to implement the recommended posted fix by Sidarius on July 24th that maintains the security settings for the service.

http://www.windowsreference.com/windows-xp/error-0x80004015-when-automatic-updates-fail-with-wsus-server
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713911
That's what I was trying to get from you :)

use the .bat here instead


http://msmvps.com/blogs/athif/pages/48959.aspx
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713914
Place the .bat into the startup scripts
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713920
We already ran a script on the computers to reset the security descriptors for the service. The issue is resolved temporarily but after a reboot, the security for the service reverts back and the service no longer starts (just like others mentioned in the link I posted).  I need a permanent fix.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 1000 total points
ID: 36713937
Ok, just looked the "Windows Update" service on 2008, the service name is wuauserv<<<<which is the same as "Automatic Updates" is on XP.
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713957
Cool. I will try that right now and let you know if it works.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question