Groupt Policy Deployment

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Dear(s),

We need to deploy SUS - auto updation of critical patches, etc. for all
clients. We have win2000 - SUS installed on that. We have deployed group
policy at domain level for auto updation.

But the group policy is not happening for OUs under domain.

We need your tips regarding this.

Regards
 
Hi
Did you check windowsupdate.log (%Systemroot%\windowsupdate.log).
What does it says? Do you have any client Firewall that is preventing sus
client from running?


How do I determine if the Automatic Updates service is running?

On Windows 2000:

1. Right-click My Computer, and then click Manage.

2. Expand Services and Applications, and then click Services.

3. Verify that Automatic Updates appears on the list of services. If
it appears, double-click the Automatic Updates entry, and view the Service
Status.

On Windows XP:

1. Click Start, click My Computer, and then click Manage.

2. Expand Services and Applications, and then click Services.

3. Verify that Automatic Updates appears on the list of services. If
it appears, double-click the Automatic Updates entry, and check the Service
Status.


In the "Configuring the Client" section, you can direct your Automatic
Updates client computers by either setting a policy or directly setting a
registry key. On the Windows client computer, ensure that the following
values exist:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate

WUServer="http://<YourServer>"

WUStatusServer="http://<YourServer>"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

UseWUServer=dword:00000001



Whenever Windows Update client components update a Windows computer, the
%windir%\Windows Update.log file is updated with information regarding the
download and installation of the packages. This log file will have a series
of log entries, for example:

2002-03-25 19:08:47 Success IUENGINE Querying software update
catalog from http://intranetSUS/autoupdate/getmanifest.asp

If entries like this one do not exist, the Automatic Updates service on that
client computer has not yet attempted to query the server for updates. The
client waits approximately 24 hours between attempts to query the server for
updates.

On the server side, Automatic Updates will make requests like the following
when querying the server for updates:

2002-03-25 19:08:48 127.0.0.1 - 127.0.0.1 80 POST
/autoupdate/getmanifest.asp - 200
Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5)






for more informatin check:
Software Update Services Deployment White Paper:
http://www.microsoft.com/windowsserversystem/updateservices/techinfo/previous/susdeployment.mspx
http://download.microsoft.com/downl...e5b-860a-465b179984af/SUS_Deployguide_sp1.doc
 
Back
Top