SUS policy

  • Thread starter Thread starter HA
  • Start date Start date
H

HA

Dear All,

Can anyone guide me on SUS policy please, The SUS software has been
installed on a [SBS server windows 2000 ] with the latest updates the server
sync fine with MS update site and all updates have been approved ready to go
for all [ MS xp clients which are all xp sp1 ].

The policy has only been applied on the ou as follows

My Business
ABCcomputers

The policy has been applied on the ABCcomputers OU and the wuau.adm has been
imported [ which is the new adm file from MS ] and the options have been
configured but unfortunately the polices don't apply to the computers /
there is no way to monitor it the right way [ though I have enabled logging
on the he default website but it does not show up and sync files in it all
I get to see is weired sysvol$ and soem other shares access and stuff which
I can post here if required ] but is this the right way to apply sus policy
or should it be at the domain lelvel.


Regards


HA
 
You can set it at the OU level if you want to. Check the Windows Update log
file on the clients and see if they are querying your SUS server.
"C:\windows\windows update.log" That is the first step. Lets go from
there.

Philip Nunn
 
forgot to mention...Make sure the computer accounts are in the OU that you
applied the policy to. This is a "Computer policy" not a user policy so you
need to make sure you have the accounts in the right places.

Philip Nunn
 
Philip as you have rightly sugegsted yes the client pcs are in that OU due
to the same reason it is a computer policy.. but this refuses to apply but
at the same time i tried to create a new policy at the domain level and it
works fine so now i am even moer curious to know why does the policy below
does not work ?

cheers


Philip Nunn said:
forgot to mention...Make sure the computer accounts are in the OU that you
applied the policy to. This is a "Computer policy" not a user policy so you
need to make sure you have the accounts in the right places.

Philip Nunn

HA said:
Dear All,

Can anyone guide me on SUS policy please, The SUS software has been
installed on a [SBS server windows 2000 ] with the latest updates the server
sync fine with MS update site and all updates have been approved ready
to
go
for all [ MS xp clients which are all xp sp1 ].

The policy has only been applied on the ou as follows

My Business
ABCcomputers

The policy has been applied on the ABCcomputers OU and the wuau.adm has been
imported [ which is the new adm file from MS ] and the options have been
configured but unfortunately the polices don't apply to the computers /
there is no way to monitor it the right way [ though I have enabled logging
on the he default website but it does not show up and sync files in it all
I get to see is weired sysvol$ and soem other shares access and stuff which
I can post here if required ] but is this the right way to apply sus policy
or should it be at the domain lelvel.


Regards


HA
 
Did you run RSOP on the clients to see what GPO's and settings are being
applied. Also try using the "gpresult" command line tool in XP and
"secedit" in 2000 boxes. See if the policy is being applied correctly.
Also...if your not using the GPMC to manage your GPO's I would suggest using
it.

Philip Nunn

HA said:
Philip as you have rightly sugegsted yes the client pcs are in that OU due
to the same reason it is a computer policy.. but this refuses to apply but
at the same time i tried to create a new policy at the domain level and it
works fine so now i am even moer curious to know why does the policy below
does not work ?

cheers


Philip Nunn said:
forgot to mention...Make sure the computer accounts are in the OU that you
applied the policy to. This is a "Computer policy" not a user policy so you
need to make sure you have the accounts in the right places.

Philip Nunn

HA said:
Dear All,

Can anyone guide me on SUS policy please, The SUS software has been
installed on a [SBS server windows 2000 ] with the latest updates the server
sync fine with MS update site and all updates have been approved ready
to
go
for all [ MS xp clients which are all xp sp1 ].

The policy has only been applied on the ou as follows

My Business
ABCcomputers

The policy has been applied on the ABCcomputers OU and the wuau.adm
has
been
imported [ which is the new adm file from MS ] and the options have been
configured but unfortunately the polices don't apply to the computers /
there is no way to monitor it the right way [ though I have enabled logging
on the he default website but it does not show up and sync files in it all
I get to see is weired sysvol$ and soem other shares access and stuff which
I can post here if required ] but is this the right way to apply sus policy
or should it be at the domain lelvel.


Regards


HA
 
Back
Top