Thursday, June 05, 2008

Enable Windows Updates from WSUS Server via Group Policy

This example is for testing, so a dedicated testing OU is created:

- Create new OU in Active Directory Users and Computers
- Move test machine(s) to new OU
- Edit Group Policy for new OU, load latest wuau.adm administrative template from C:\Windows\Inf folder of WSUS server
- Configure at minimum "Computer Configuration\Administrative Templates\Windows Components\Windows Update\Configure Windows Updates" and "..\Specify intranet Microsoft update service location"
- To force application of new GP settings to test client, issue command "gpupdate /force" on XP clients (secedit /refreshpolicy machine_policy enforce on Win2K)

References: http://technet2.microsoft.com/windowsserver/en/library/51c8a814-6665-4d50-a0d8-2ae27e69ca7c1033.mspx?mfr=true