Group Policy QUestion

ENvironment : single Windows 2003 SP2 DC, 10 users

Just after connecting the new 2008 R2 to the 2003 domain, I noticed in "Windows Update" that options to change setting of Windows update and in grey and that I cannot change that. I am logged as domain administrator.

I do not know why I cannot change Windows update settings, It may be caused by a group Policy rules in the 2003 SP2 DC

But I do not know where to look for this GPO in 2003 DC and how to change that

THank you
Who is Participating?
Pradeep DubeyConnect With a Mentor ConsultantCommented:
Check below reg key once.
Software restriction policies are stored in the registry. In


or in

Pradeep DubeyConsultantCommented:
See the below MS link :

Also check for the service of windows update its running or not..
Haresh NikumbhSr. Tech leadCommented:
Click Start, Run and type gpedit.msc

    Navigate to the following location:

    => Computer Configuration
    ==> Administrative Templates
    ===> Windows Components
    ====> Windows Update

    In the right-pane, double-click Configure Automatic Updates and set it to Not Configured

    Then, navigate to this location:

    => User Configuration
    ==> Administrative Templates
    ===> Windows Components
    ====>  Windows Update

    In the right-pane, set Remove access to all Windows Update features to Not Configured
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

gadsadAuthor Commented:
Regarding GPO, everything is already set to "not configured", so  nothing can be changed

Regarding REGEDIT, instruction are not clear enough to know what to change precisely

I am still in the same situation: I cannot make changes in Windows update, since options are in grey

If someone has more ideas

Thank you to all
Pradeep DubeyConsultantCommented:
Import and attach below reg key :

Run RSOP.MSC and navigate to: Computer Configuration\Administrative Templates\Windows Components\Windows Update.  If there is a GPO that has this enabled, it will show it there.

Also, you can go to a machine that has the Group Policy Management Console and after running it, navigate to the bottom of the left pan and choose "Group Policy Results".  Right click and follow instructions.  It will ask you for a computer name that you want to check the GPO Results.  You can specify a user name is you want.  At the end, the report should show if the setting is there and which GPO is applying it.  If none of these show something, then it may be a change directly in the registry.  This may provide you more information:

NOTE: RSOP.MSC is being deprecated because it has not been updated to show Group Policy Preferences or newer settings.  However, in this case, it may help. ;)

Gladys Rodriguez
gadsadAuthor Commented:
thank you
it worked fine
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.