Control Windows Services through grou policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Can I modify the status of a service through group policy??

I would like to change the status of the automatic updates service to
automatic and started through group policy. Can I do this. No point in
rolling out WUS if I can't ensure the service is running.
 
Justin55 said:
Can I modify the status of a service through group policy??

I would like to change the status of the automatic updates
service to
automatic and started through group policy. Can I do this.
No point in
rolling out WUS if I can't ensure the service is running.
Click to expand...

Hi,

By default this service is running on all W2K and WXP clients.
However, the service setting is located in

Computer Config
Windows Settings
Security Settings
System Services

Make sure you do it on a Separate Computer OU and not the Domain OU.

Also, set the WUS Service here:
Comp Config
Admin Templates
Windows Components
Windows Update
"Configure Automatic Updates = Enabled"
"Specify Intranet Microsoft Update Service Location = Enabled"

By the way, if installing WUS, here are a few tips I learned the hard
way.

1> Make sure the Network Service has at least Read on the Root of the
drive you install WUS on.
2> Make sure the Domain Computers Group has Read on the WUS content
folder.

Cheers,

Lara
 
Yep that did it. I already had the GP to get set automatic updates to scan
for updates and install updates but if the service was disabled it didn't
work. Looked around for thoses settings everywhere and they were right in
front of me. Cheers
 
Justin55 said:
Yep that did it. I already had the GP to get set automatic
updates to scan
for updates and install updates but if the service was
disabled it didn't
work. Looked around for thoses settings everywhere and they
were right in
front of me. Cheers


 > > Can I modify the status of a service through group
policy??
 > >
 > > I would like to change the status of the automatic
updates
 > > service to
 > > automatic and started through group policy. Can I
do this.
 > > No point in
 > > rolling out WUS if I can't ensure the service is
running.
Click to expand...

Hi,

Glad to help. The service is usually not disabled unless you disabled
it. Also with XPSP2, it automatically turns it on again.

Glad you figured it out.

Cheers,
Lara
 
Just a quick one what did you mean when you said to allow the network service
read on the root of the drive. I have just given the read to the domain
computers but how do i give the network service access.
 
Justin55 said:
Just a quick one what did you mean when you said to allow the
network service
read on the root of the drive. I have just given the read to
the domain
computers but how do i give the network service access.


 > > Yep that did it. I already had the GP to get set
automatic
 > > updates to scan
 > > for updates and install updates but if the service
was
 > > disabled it didn't
 > > work. Looked around for thoses settings everywhere
and they
 > > were right in
 > > front of me. Cheers
 > >
 > > "lforbes" wrote:
 > >
  > > > "Justin55" wrote:
  > > > > Can I modify the status of a service
through group
 > > policy??
  > > > >
  > > > > I would like to change the status of
the automatic
 > > updates
  > > > > service to
  > > > > automatic and started through group
policy. Can I
 > > do this.
  > > > > No point in
  > > > > rolling out WUS if I can't ensure the
service is
 > > running.
  > > >
  > > > Hi,
  > > >
  > > > By default this service is running on all
W2K and WXP
 > > clients.
  > > > However, the service setting is located in
  > > >
  > > > Computer Config
  > > > Windows Settings
  > > > Security Settings
  > > > System Services
  > > >
  > > > Make sure you do it on a Separate Computer
OU and not the
 > > Domain OU.
  > > >
  > > > Also, set the WUS Service here:
  > > > Comp Config
  > > > Admin Templates
  > > > Windows Components
  > > > Windows Update
  > > > "Configure Automatic Updates = Enabled"
  > > > "Specify Intranet Microsoft Update Service
Location =
 > > Enabled"
  > > >
  > > > By the way, if installing WUS, here are a
few tips I learned
 > > the hard
  > > > way.
  > > >
  > > > 1> Make sure the Network Service has at
least Read on the
 > > Root of the
  > > > drive you install WUS on.
  > > > 2> Make sure the Domain Computers Group
has Read on the
 > > WUS content
  > > > folder.
  > > >
  > > > Cheers,
  > > >
  > > > Lara
  > > >
  > > > --
  > > > Posted using the
http://www.windowsforumz.com interface, at author's request
  > > > Articles individually checked for
conformance to usenet
 > > standards
  > > > Topic URL:
http://www.windowsforumz.com/Group-Policy-Control-Windows-Services-grou-ftopict344950.html
  > > > Visit Topic URL to contact author (reg.
req'd). Report abuse:
http://www.windowsforumz.com/eform.php?p=1082258
  > > >
Click to expand...

Hi,

The Network Service is an account like the SYSTEM account. Just add it
to the permissions on root of the drive and make sure it has at least
Read. If you are having synch errors it may need more. I have it
having write access.

If you don’t have it there, then WUS cannot see the drive when
synching.

Cheers,
Lara
 
Back
Top