Group Policy and Windows Updates.

  • Thread starter Thread starter Adam
  • Start date Start date
A

Adam

I am currently have a problem keeping all of our company
computers updated with the lastest hotfixes and minor
updates. We have the computers set to automatically
download these and then put the windows icon in the lower
right had corner of the task bar. The problem is that I
have to go to their computers and execute them because the
users fail to notice them or just ignore them. I know
that I could set a time in automatic updates fo them to
run, but this posses problems with computer being off or
the user being in the middle of something important when
the update runs. I want to know if there is some way with
group policy or maybe a script that I could set these
updates to install when the user logs into the machine.
That way it won't interfere with they're work and everyone
will be up to date.

Any help is appreciated.
 
Check out the following article for how to do this:

328010 How to Configure Automatic Updates by Using Group Policy or
Registry
http://support.microsoft.com/?id=328010

You can set the updates to install at anytime you wish, even at night.
If you had them install at the user login the login times would
increase to an unbearable level.


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
If you schedule autoinstall of updates but the computer is
off during that time. When will they be installed?
 
If the computer is off then no updates can be installed.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Yes, go here:
http://www.microsoft.com/windowsserversystem/sus/default.ms
px

This is the SUS site (Software Update Services). Basically
you setup a server to go to the MS Update site and
download all the SP´s, Patches etc.. and then you set the
client up to go to YOUR server and automatically install
the updates. There is a client you can download as well
that you can configure to do all sorts of things.

This services does the same thing that most AntiVirus
packages do, that is, the server downloads the pattern
files and the clients get their updates from the server.
Saves lots of Bandwidth AND you as the ADMIN can control
which patches get installed. You can test them before as
well, so you dont run into any problems later on.

Hope this helps,

Paolo
 
Back
Top