| Author | Messages | |
darin
Posts:7
 | | 01/28/2009 4:52 AM |
| All,
Does anyone know of a way to force, through group policy, Windows XP
clients to use MICROSOFT update for automatic updates? I'm not really
interested in WSUS as the automatic mechanism seems to work fine for us.
What is everyone else doing?
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
| | | |
| darin
Posts:7
| | 01/28/2009 6:51 AM |
| Florian,
We do set this setting to enable Automatic Windows updates, but there is
also 'Microsoft Update', which deals with Microsoft security patches as
well as some Microsoft products, Office, SQL etc. I want to know if its
possible to force the clients to use Microsoft Update?
Hope this makes sense.
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Florian Frommherz
Sent: 28 January 2009 10:38
To: xxxxxxxxxxxxxxxx
Subject: AW: [gptalk] Microsoft Update
Darin,
if I understand you correctly, you can use the Windows Update GPs - you
simply don't configure the "intranet Microsoft Update service location",
as it defaults to Windows Update on the internet. From the explain text:
"If the status is set to Disabled or Not Configured, and if Automatic
Updates is not disabled by policy or user preference, the Automatic
Updates client connects directly to the Windows Update site on the
Internet."
Just configure the settings you want and leave "intranet location"
alone.
Florian
________________________________
Von: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] Im Auftrag von Cruickshanks,
Darin
Gesendet: Mittwoch, 28. Januar 2009 10:47
An: xxxxxxxxxxxxxxxx
Betreff: [gptalk] Microsoft Update
All,
Does anyone know of a way to force, through group policy, Windows XP
clients to use MICROSOFT update for automatic updates? I'm not really
interested in WSUS as the automatic mechanism seems to work fine for us.
What is everyone else doing?
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
| | | |
| JamieNelson
Posts:166
| | 01/28/2009 11:23 AM |
| Sorry, didn't answer your last question. We still use standalone WSUS
where I work, although we're moving to SCCM for patching (which is just
WSUS integrated into the SCCM infrastructure).
Honestly, I would use WSUS if I were you. It's free and is really not
very hard to setup. You get so much more flexibility over what updates
to do deploy (and when to deploy them) as well as a good overall view of
your organization's patch status. No to mention that you only download
the patches once to your WSUS server, instead of each client downloading
them over the Internet.
It's kind of a no-brainer unless you only have a handful of PCs (10-15).
Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 |
http://www.dvn.com <http://www.dvn.com/>
From: Nelson, Jamie
Sent: Wednesday, January 28, 2009 10:10 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] Microsoft Update
Apparently you can do it with a script. See this blog:
http://www.theexperienceblog.com/2007/11/02/setting-microsoft-update-to-
be-default-using-a-script/
I would do this via a startup script though, to ensure it is set
properly. Would also want to make sure it does a check first to ensure
the Microsoft Update service isn't already enabled. Not sure what would
happened if it tried to add it multiple times.
Regards,
Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Wednesday, January 28, 2009 3:47 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Microsoft Update
All,
Does anyone know of a way to force, through group policy, Windows XP
clients to use MICROSOFT update for automatic updates? I'm not really
interested in WSUS as the automatic mechanism seems to work fine for us.
What is everyone else doing?
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| omar
Posts:75
| | 01/28/2009 11:53 AM |
| OK what I do for many clients is setup WSUS internally and point clients to the WSUS server for updated- but the end clients actually download their updates from the MIcrosoft website.
This gives the ability to get all the clients updated to support microsoft update- by simply approving the WSUS required updates then if you want you can simply update the GPO-after you get reporting that every client has the WSUS updates- then the GPO can be updated to simply remove the intranet server settings.
This will not only get your a bird's eye view that the clients are ready for MS update- and then you can turn them loose- but do you really want to let your end users choose to install service packs and the such? We use WSUS and auto update critical security updates for client workstation groups but under feature packs/ service packs / roll ups- we test and roll those out in batches- either through GPO SW installation or through WSUS in stages as possible.
Omar Droubi
xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
650-726-0300
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie [xxxxxxxxxxxxxxxx]
Sent: Wednesday, January 28, 2009 08:18 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Microsoft Update
Sorry, didn’t answer your last question. We still use standalone WSUS where I work, although we’re moving to SCCM for patching (which is just WSUS integrated into the SCCM infrastructure).
Honestly, I would use WSUS if I were you. It’s free and is really not very hard to setup. You get so much more flexibility over what updates to do deploy (and when to deploy them) as well as a good overall view of your organization’s patch status. No to mention that you only download the patches once to your WSUS server, instead of each client downloading them over the Internet.
It’s kind of a no-brainer unless you only have a handful of PCs (10-15).
Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 | http://www.dvn.com<http://www.dvn.com/>
From: Nelson, Jamie
Sent: Wednesday, January 28, 2009 10:10 AM
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] Microsoft Update
Apparently you can do it with a script. See this blog:
http://www.theexperienceblog.com/2007/11/02/setting-microsoft-update-to-be-default-using-a-script/
I would do this via a startup script though, to ensure it is set properly. Would also want to make sure it does a check first to ensure the Microsoft Update service isn’t already enabled. Not sure what would happened if it tried to add it multiple times.
Regards,
Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Cruickshanks, Darin
Sent: Wednesday, January 28, 2009 3:47 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Microsoft Update
All,
Does anyone know of a way to force, through group policy, Windows XP clients to use MICROSOFT update for automatic updates? I’m not really interested in WSUS as the automatic mechanism seems to work fine for us. What is everyone else doing?
Thanks,
Darin
--------------------------------------------
Darin Cruickshanks
Lab Support Manager, Computing Service
University of Essex
01206 873585
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
|
|