Windows Update and Group Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Is it possible to apply Windows Updates to client machines via Group Policy?
If so, how?

Thanks,

Mike
 
Hi Mike

On Windows XP (and I'm pretty sure recent service packs of Windows 2000),
you can specify update settings via Computer Configuration -> Administrative
Templates -> Windows Components -> Windows update.

If you want to control the specific updates applied to clients, you'll need
to set up a SUS server in your environment and use the policy settings to
specify the SUS server as the source of updates.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Mark,

Thanks for taking the time. I will check it out. It sounds like a "SUS"
server houses the update files and the clients connect to it for the updates
rather than Microsoft's site. Is that correct? What does "SUS" stand for,
and can any server do it?

Thanks,

Mike


Mark Renoden said:
Hi Mike

On Windows XP (and I'm pretty sure recent service packs of Windows 2000),
you can specify update settings via Computer Configuration -> Administrative
Templates -> Windows Components -> Windows update.

If you want to control the specific updates applied to clients, you'll need
to set up a SUS server in your environment and use the policy settings to
specify the SUS server as the source of updates.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Mike said:
Is it possible to apply Windows Updates to client machines via Group
Policy?
If so, how?

Thanks,

Mike
Click to expand...
Click to expand...
 
Hi Mike

SUS is Software Update Services. It attaches to Windows Update and pulls
updates locally. Administrators can then select which updates are approved
to distribution to clients and you can use group policy to say where the SUS
server is, when the client checks for updates and how the updates are
installed (user interaction or not).

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Mike said:
Mark,

Thanks for taking the time. I will check it out. It sounds like a "SUS"
server houses the update files and the clients connect to it for the
updates
rather than Microsoft's site. Is that correct? What does "SUS" stand
for,
and can any server do it?

Thanks,

Mike


Mark Renoden said:
Hi Mike

On Windows XP (and I'm pretty sure recent service packs of Windows 2000),
you can specify update settings via Computer Configuration ->
Administrative
Templates -> Windows Components -> Windows update.

If you want to control the specific updates applied to clients, you'll
need
to set up a SUS server in your environment and use the policy settings to
specify the SUS server as the source of updates.

http://www.microsoft.com/windowsserversystem/sus/default.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no
rights.

Mike said:
Is it possible to apply Windows Updates to client machines via Group
Policy?
If so, how?

Thanks,

Mike
Click to expand...
Click to expand...
Click to expand...
 
Mark, if you set updates to download and install automatically, will
SP2 be downloaded and installed with this option?
 
Hi Rick

I haven't looked at it in a little while but I believe you can deploy SP2
for XP using SUS.

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Mark Renoden MSFT said:
Hi Rick

I haven't looked at it in a little while but I believe you can
deploy SP2
for XP using SUS.

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email
address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and
confers no rights.

Rick said:
Mark, if you set updates to download and install automatically, will
SP2 be downloaded and installed with this option?
Click to expand...
 >>Hi Mike
 >>
 >>SUS is Software Update Services. It attaches to
Windows Update and pulls
 >>updates locally. Administrators can then select which
updates are
 >>approved
 >>to distribution to clients and you can use group
policy to say where the
 >>SUS
 >>server is, when the client checks for updates and how
the updates are
 >>installed (user interaction or not).
 >>
 >>HTH
Click to expand...

Hi,

First of all, I recommend installing WUS if you are running Windows
2003 Server. It is the newer version of SUS. It is in Beta but is more
stable in Beta than SUS is regular. I use both and Love them.

WUS lets you specify what updates you want to download, SUS downloads
them all and lets you approve them (but they are sitting on your
server).

All my machines update via WUS at 2am daily. I am pretty impressed
with it so far.

Cheers,

Lara
 
But if I have automatic updates set in a GPO they will download
automatically? Also as of April 12th is sp2 going to be installed by
default even if you have the reg hack to block it?
 
Rick said:
But if I have automatic updates set in a GPO they will
download
automatically? Also as of April 12th is sp2 going to be
installed by
default even if you have the reg hack to block it?
Click to expand...

Hi,

WUS and SUS lets you decide which updates to deploy, including Service
Packs. I have set my service packs to download to my server and then
"detect only". I have NOT set SP2 up to deploy automatically. I
prefer to do it manually to make sure it deploys correctly.

Your updates with WUS and SUS are downloaded to your server. Then
using the GPO you decide whether to detect, auto download from Your
server or autodownload from your server and install automatically.

Eg. I have my clients with auto download from my WUS server and
install. However, my servers are set to autodownload only and I
install when I can restart them.

Cheers,

Lara
 
Back
Top