WSUS setting

I set up Group policy so that all PC access to WSUS server to update .
I thought the configuration was successful.
On WSUS server, all pc is appear and I can attach some update file to all pc.
This windows update is supposed to be done without any user's confirmation,
when shutdown and starting , all windows update would be installed.

However, I noticed that each user can select update from windows update .
each user has only thier ordianary user's permission.


I am not sure reason why user can select update from the update list.
I don't want not to allow users to select some update.
without any confirmation, automatically, update should be done.

In order to do this, what kind of point should I check ?
important things are missing ?
shouichiAsked:
Who is Participating?
 
DonNetwork AdministratorCommented:
Did you select "Automatically download updates and install them on the schedule specified below" ???


http://technet.microsoft.com/en-us/library/cc708536%28WS.10%29.aspx


Also go over

http://technet.microsoft.com/en-us/library/cc512630.aspx
0
 
sgdoughtCommented:
The registry settings that control WSUS are described here:
http://technet.microsoft.com/en-us/library/cc708449(WS.10).aspx

You can try applying them with regedit imports using .reg files.
0
 
sgdoughtCommented:
Or you can try applying them with group policy.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Robin CMSenior Security and Infrastructure EngineerCommented:
You must have configured the "Allow Non-administrators to Receive Update Notifications" group policy setting, by default (unconfigured) only administrators see updates on clients, if it's been set to "enabled" then ordinary users will get notifications too.
You either need to disable it or set it back to unconfigured.
0
 
shouichiAuthor Commented:

>You must have configured the "Allow Non-administrators to Receive Update Notifications" group policy setting, by default (unconfigured) only administrators see updates on clients, if it's been set to "enabled" then ordinary users will get notifications too.

this is diabled.

>Did you select "Automatically download updates and install them on the schedule specified below" ???

Yes.
Is this problem?

Any other suggestions ?
0
 
Robin CMSenior Security and Infrastructure EngineerCommented:
On Windows 7 PCs go to Windows Update, Change Settings, have a look at the state of the box "Allow all users to install updates on this computer" in the "Who can install updates" section.
0
 
DonNetwork AdministratorCommented:
Everything you need below:



Best Practices with Windows Server Update Services


http://technet.microsoft.com/en-us/library/cc708536%28WS.10%29.aspx



Best Practices for Applying Service Packs, Hotfixes and Security Patches


http://technet.microsoft.com/en-us/library/cc750077.aspx



WSUS GPO Settings for the real world

http://community.spiceworks.com/how_to/show/1390


WSUS Troubleshooting Survival Guide


http://social.technet.microsoft.com/wiki/contents/articles/wsus-troubleshooting-survival-guide.aspx
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.