| Author | Messages | |
AD000001349
Posts:0
 | | 03/15/2006 1:33 AM |
| In my scenario the pc are not on constantly (they are only on when the user uses it). Can you send those settings over please. These are the settings I have at the moment:
Do not display "Install Updates and Shutdown' option in Shutdown Windows dialog box - Disabled
Configure Automatic Updates - Enabled (3)
No auto-restart for scheduled Automatic Updates Installations - Enabled
Allow Automatic Updates immediate installations - Enabled
Allow Non-Admin to receive update notifications - Enabled
Also how do I go about setting up WSUS?
--
Shane De Jager
Technical Developer
INTERGAGE
High-performance, updateable Web sites
Switchboard +44 (0)845 456 1022
==
www.intergage.co.uk
sdejager@xxxxxxxxxxxxxxx
PS - Are you aware of our referral scheme? Learn how you could profit personally from passing us leads.
Click here to pass a referral: www.intergage.co.uk/referrals
---------- Original Message ----------
FROM: "Bart Van den Wyngaert"
TO: ActiveDir@xxxxxxxxxxxxxxxxxx
DATE: Wed, 15 Mar 2006 14:01:14 +0100
SUBJECT: Re: [ActiveDir] Automatic update and Non-Admin Accounts
Hi Shane,
No you do not need to log onto each machine and run updates manually :-)
I've configured my WSUS settings through GPO for the clients. They install each night the updates from my WSUS server and if a user is logged on (locked the pc), the pc won't reboot automatically in case it's needed, but display a notification.
I can send you the GPO settings I use and ofcourse you can link all pc's directly to the internet of to your local WSUS server.
In case you're using it for servers, other settings are applicable ofcourse depending on your environment.
Best regards,
Bart
On 3/15/06, Shane De Jager wrote:
Hi,Do automatic updates install automatically with no admin accounts? Or do I have to log onto each machine and run updates manually? What is the best group policy setting for automatic updates?
--Shane De JagerTechnical DeveloperINTERGAGEHigh-performance, updateable Web sitesSwitchboard +44 (0)845 456 1022==www.intergage.co.uk
sdejager@xxxxxxxxxxxxxxxPS - Are you aware of our referral scheme? Learn how you could profit personally from passing us leads.Click here to pass a referral:
http://www.activedir.org/List.aspxList FAQ:
http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| Marty1_0
Posts:0
| | 03/15/2006 2:38 AM |
| There are 2 errors I've encountered in my scenario:
1) there was an error on WSUS itself, but easily to solve (the site to contact)
2) I have a GPO which forces that the service "Automatic Updates" should be started and configured as "Automatic". Suddenly on clients, the service wouldn't start anymore. Solution was to configure the security settings for that service in the GPO, add read access for "Authenticated users". Since then no more issues.
Both errors were widly documented and I didn't loose much time on investigating/resolving them. For the environment where I've implemented it, this configuration was an absolute must. You must always evaluate whether it meets your requirements ofcourse.
Best regards,
Bart
On 3/15/06, Shane De Jager wrote:
In my scenario the pc are not on constantly (they are only on when the user uses it). Can you send those settings over please. These are the settings I have at the moment:
Do not display "Install Updates and Shutdown' option in Shutdown Windows dialog box - DisabledConfigure Automatic Updates - Enabled (3)No auto-restart for scheduled Automatic Updates Installations - Enabled
Allow Automatic Updates immediate installations - EnabledAllow Non-Admin to receive update notifications - EnabledAlso how do I go about setting up WSUS?--Shane De JagerTechnical Developer
INTERGAGEHigh-performance, updateable Web sitesSwitchboard +44 (0)845 456 1022==www.intergage.co.uksdejager@xxxxxxxxxxxxxxx
PS - Are you aware of our referral scheme? Learn how you could profit personally from passing us leads.Click here to pass a referral: www.intergage.co.uk/referrals
---------- Original Message ----------FROM: "Bart Van den Wyngaert" TO:
ActiveDir@xxxxxxxxxxxxxxxxxxDATE: Wed, 15 Mar 2006 14:01:14 +0100SUBJECT: Re: [ActiveDir] Automatic update and Non-Admin AccountsHi Shane,
No you do not need to log onto each machine and run updates manually :-)I've configured my WSUS settings through GPO for the clients. They install each night the updates from my WSUS server and if a user is logged on (locked the pc), the pc won't reboot automatically in case it's needed, but display a notification.
I can send you the GPO settings I use and ofcourse you can link all pc's directly to the internet of to your local WSUS server.
In case you're using it for servers, other settings are applicable ofcourse depending on your environment.Best regards,Bart
On 3/15/06, Shane De Jager ">sdejager@xxxxxxxxxxxxxxx> wrote:Hi,Do automatic updates install automatically with no admin accounts? Or do I have to log onto each machine and run updates manually? What is the best group policy setting for automatic updates?
--Shane De JagerTechnical DeveloperINTERGAGEHigh-performance, updateable Web sitesSwitchboard +44 (0)845 456 1022==www.intergage.co.uk
sdejager@xxxxxxxxxxxxxxx">sdejager@xxxxxxxxxxxxxxxPS - Are you aware of our referral scheme? Learn how you could profit personally from passing us leads.Click here to pass a referral:
www.intergage.co.uk/referralsList info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspxList FAQ :
http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| Marty1_0
Posts:0
| | 03/15/2006 11:47 AM |
| - 4 - Auto download and schedule the install
==> Scheduled install day: 0 - Every day
==> Scheduled install time: 03:00
- Enable client-side targeting: Enabled
- Target group name for this computer: Computers (or Servers in case of Servers GPO)
- Specify intranet Microsoft update service location: Enabled
==> for both (intranet update service + statistics) : http://:8530
But as indicated this afternoon, read something about, the docs are very good and take some hours to get the correct config for your specific environment. Please also into account the remarks by Susan and Daniel and you will have a proper solution!
Best regards,
Bart
On 3/15/06, Shane De Jager wrote:
In my scenario the pc are not on constantly (they are only on when the user uses it). Can you send those settings over please. These are the settings I have at the moment:
Do not display "Install Updates and Shutdown' option in Shutdown Windows dialog box - DisabledConfigure Automatic Updates - Enabled (3)No auto-restart for scheduled Automatic Updates Installations - Enabled
Allow Automatic Updates immediate installations - EnabledAllow Non-Admin to receive update notifications - EnabledAlso how do I go about setting up WSUS?--Shane De JagerTechnical Developer
INTERGAGEHigh-performance, updateable Web sitesSwitchboard +44 (0)845 456 1022==www.intergage.co.uksdejager@xxxxxxxxxxxxxxx
PS - Are you aware of our referral scheme? Learn how you could profit personally from passing us leads.Click here to pass a referral: www.intergage.co.uk/referrals
---------- Original Message ----------FROM: "Bart Van den Wyngaert" TO:
ActiveDir@xxxxxxxxxxxxxxxxxxDATE: Wed, 15 Mar 2006 14:01:14 +0100SUBJECT: Re: [ActiveDir] Automatic update and Non-Admin AccountsHi Shane,
No you do not need to log onto each machine and run updates manually :-)I've configured my WSUS settings through GPO for the clients. They install each night the updates from my WSUS server and if a user is logged on (locked the pc), the pc won't reboot automatically in case it's needed, but display a notification.
I can send you the GPO settings I use and ofcourse you can link all pc's directly to the internet of to your local WSUS server.
In case you're using it for servers, other settings are applicable ofcourse depending on your environment.Best regards,Bart
On 3/15/06, Shane De Jager ">sdejager@xxxxxxxxxxxxxxx> wrote:Hi,Do automatic updates install automatically with no admin accounts? Or do I have to log onto each machine and run updates manually? What is the best group policy setting for automatic updates?
--Shane De JagerTechnical DeveloperINTERGAGEHigh-performance, updateable Web sitesSwitchboard +44 (0)845 456 1022==www.intergage.co.uk
sdejager@xxxxxxxxxxxxxxx">sdejager@xxxxxxxxxxxxxxxPS - Are you aware of our referral scheme? Learn how you could profit personally from passing us leads.Click here to pass a referral:
www.intergage.co.uk/referralsList info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspxList FAQ :
http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
|
|