Solved

Windows 2008 GPMC missing service

Posted on 2011-09-27
15
731 Views
Last Modified: 2012-05-12
I want to use Group Policy Management Console on an AD 2008 server to change the start up settings for the Windows system service called "Automatic Updates" service for some Windows XP domain computers.  However, I don't see the service listed in the following location.
(Computer Configuration, Windows Settings, Security Settings, System Services)

I do see a service named "Windows Update" but I'm not sure if changing that service will affect the Automatic Update service on XP.
0
Comment
Question by:AManoux
  • 9
  • 6
15 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712458
Computer Configuration>>>Administrative templates>>>Windows Components>>>Windows Update>>>Configure automatic updates>>>Set to disabled
0
 
LVL 1

Author Comment

by:AManoux
ID: 36712882
Thanks, but I need the location in GPMC where I can specify what the startup type is for the Automatic Updates service; whether it's "Automatic", "Manual" or "Disabled" as well as the security permissions for the service.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712908
What is your specific need for disabling this service?? This is a very uncommon request.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36712929
  If you are trying to control users access...

 You can use Group Policy settings to disable both Windows Update and Automatic Updates.

        To disable Windows Update and Automatic Updates by preventing the operating system from being updated through Windows Update, configure Remove access to use all Windows Update features in User Configuration\Administrative Templates\Windows Components\Windows Update.

        To prevent access to Windows Update commands, configure Remove links and access to Windows Update in User Configuration\Administrative Templates\Start Menu and Taskbar.

    You can use Group Policy settings to selectively disable Automatic Updates.

    To do this, enable Windows Automatic Updates in User Configuration\Administrative Templates\System.

http://technet.microsoft.com/en-us/library/bb490846.aspx
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713267
I think you might have become confused along the way.  My question was never around how to disable the Automatic Updates service or prevent it from running.  I just wanted to know where in the GPMC can I find the options to change the start up type like the other services listed under (Computer Configuration, Windows Settings, Security Settings, System Services)
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713330
Only the services that exist on the local client will appear in the GPMC when navigating to this location.


You still didnt answer the question "What is your specific need for disabling this service??"
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713359
Sorry..should have asked "What is your need to change startup type?"
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713376
I don't have any need to disable the service and have no intention of disabling the service.  Why do you keep asking that question?  I actually want to use a GPO to specifically set the service's start up option to "automatic"

So you are saying that the GPMC will only list services that are local to the domain controller which is a Windows 2008 server so I can't control the start up type for the XP service?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713847
What I'm saying is that default for "Automatic Updates" is already "Automatic" there should be no need to create a GPO to modify this. That's why I am asking what is leading you down this path?
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713882
Running into this issue (see link).  Trying to implement the recommended posted fix by Sidarius on July 24th that maintains the security settings for the service.

http://www.windowsreference.com/windows-xp/error-0x80004015-when-automatic-updates-fail-with-wsus-server
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713911
That's what I was trying to get from you :)

use the .bat here instead


http://msmvps.com/blogs/athif/pages/48959.aspx
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 36713914
Place the .bat into the startup scripts
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713920
We already ran a script on the computers to reset the security descriptors for the service. The issue is resolved temporarily but after a reboot, the security for the service reverts back and the service no longer starts (just like others mentioned in the link I posted).  I need a permanent fix.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 36713937
Ok, just looked the "Windows Update" service on 2008, the service name is wuauserv<<<<which is the same as "Automatic Updates" is on XP.
0
 
LVL 1

Author Comment

by:AManoux
ID: 36713957
Cool. I will try that right now and let you know if it works.
0

Join & Write a Comment

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now