| Author | Messages | |
petertjohnson
Posts:17
 | | 09/02/2010 11:12 AM |
| Hi Guys
I've got an interesting one here. Been asked how to reset the WSUS policies on a machine that's in a Small Business Server 2008 domain.
Basically the user is never in the network where the SBS server is. If the user is an admin on the box is there some way we can reset the WSUS policies so that the machine will download and install the updates directly from MS rather than requiring a connection to the WSUS server?
Thanks in advance. Regards [cid:image001.jpg@01CB4A8C.EC242620]
Peter Johnson I.T Architect United Kingdom: +44 1285 658542 South Africa: +27 11 252 1100 Swaziland: +268 442 7000 Fax:+27 11 974 7130 Mobile: +2783 306 0019 xxxxxxxxxxxxxxxx www.peterstow.com<http://www.peterstow.com>
This email message (including attachments) contains information which may be confidential and/or legally privileged. Unless you are the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message or from any attachments that were sent with this email, and If you have received this email message in error, please advise the sender by email, and delete the message. Unauthorised disclosure and/or use of information contained in this email may result in civil and criminal liability. Everything in this e-mail and attachments relating to the official business of Peterstow Aquapower is proprietary to the company.
Caution should be observed in placing any reliance upon any information contained in this e-mail, which is not intended to be a representation or inducement to make any decision in relation to Peterstow Aquapower. Any decision taken based on the information provided in this e-mail, should only be made after consultation with appropriate legal, regulatory, tax, technical, business, investment, financial, and accounting advisors. Neither the sender of the e-mail, nor Peterstow Aquapower shall be liable to any party for any direct, indirect or consequential damages, including, without limitation, loss of profit, interruption of business or loss of information, data or software or otherwise.
The e-mail address of the sender may not be used, copied, sold, disclosed or incorporated into any database or mailing list for spamming and/or other marketing purposes without the prior consent of Peterstow Aquapower. No warranties are created or implied that an employee of Peterstow Aquapower and/or a contractor of Peterstow Aquapower is authorized to create and send this e-mail. [cid:image002.jpg@01CB4A8C.EC242620]
| | | |
| chankster
Posts:4
 | | 09/02/2010 11:35 AM |
| Couldn't you just set HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer to 0 (zero)?
-Anders
On Thu, Sep 2, 2010 at 10:52 AM, Peter Johnson <xxxxxxxxxxxxxxxx>wrote:
> > > Hi Guys > > > > I’ve got an interesting one here. Been asked how to reset the WSUS policies > on a machine that’s in a Small Business Server 2008 domain. > > > > Basically the user is never in the network where the SBS server is. If the > user is an admin on the box is there some way we can reset the WSUS policies > so that the machine will download and install the updates directly from MS > rather than requiring a connection to the WSUS server? > > > > Thanks in advance. > > Regards > > [image: Description: > C:\Users\PeterTJ\AppData\Roaming\Microsoft\Signatures\peterstow logo2.jpg] > > Peter Johnson > I.T Architect > United Kingdom: +44 1285 658542 > South Africa: +27 11 252 1100 > Swaziland: +268 442 7000 > Fax:+27 11 974 7130 > Mobile: +2783 306 0019 > xxxxxxxxxxxxxxxx > www.peterstow.com > > > > *This email message (including attachments) contains information which may > be confidential and/or legally privileged. Unless you are the intended > recipient, you may not use, copy or disclose to anyone the message or any > information contained in the message or from any attachments that were sent > with this email, and If you have received this email message in error, > please advise the sender by email, and delete the message. Unauthorised > disclosure and/or use of information contained in this email may result in > civil and criminal liability. Everything in this e-mail and attachments > relating to the official business of Peterstow Aquapower is proprietary to > the company. > > Caution should be observed in placing any reliance upon any information > contained in this e-mail, which is not intended to be a representation or > inducement to make any decision in relation to Peterstow Aquapower. Any > decision taken based on the information provided in this e-mail, should only > be made after consultation with appropriate legal, regulatory, tax, > technical, business, investment, financial, and accounting advisors. Neither > the sender of the e-mail, nor Peterstow Aquapower shall be liable to any > party for any direct, indirect or consequential damages, including, without > limitation, loss of profit, interruption of business or loss of information, > data or software or otherwise. > > The e-mail address of the sender may not be used, copied, sold, disclosed > or incorporated into any database or mailing list for spamming and/or other > marketing purposes without the prior consent of Peterstow Aquapower. *** > > *No warranties are created or implied that an employee of Peterstow > Aquapower and/or a contractor of Peterstow Aquapower is authorized to create > and send this e-mail.** *** > > * **[image: Description: > C:\Users\PeterTJ\AppData\Roaming\Microsoft\Signatures\environment2.jpg]* >
| | | |
| peavey
Posts:2
 | | 09/02/2010 1:23 PM |
| wont the GPO over ride when the machine is restarted?
you could block heritiance of the WSUS policy on that server by the OU
On 2 September 2010 05:16, Anders Blomgren <xxxxxxxxxxxxxxxx> wrote:
> Couldn't you just set > HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer to 0 > (zero)? > > -Anders > > On Thu, Sep 2, 2010 at 10:52 AM, Peter Johnson < > xxxxxxxxxxxxxxxx> wrote: > >> >> >> Hi Guys >> >> >> >> I’ve got an interesting one here. Been asked how to reset the WSUS >> policies on a machine that’s in a Small Business Server 2008 domain. >> >> >> >> Basically the user is never in the network where the SBS server is. If the >> user is an admin on the box is there some way we can reset the WSUS policies >> so that the machine will download and install the updates directly from MS >> rather than requiring a connection to the WSUS server? >> >> >> >> Thanks in advance. >> >> Regards >> >> [image: Description: >> C:\Users\PeterTJ\AppData\Roaming\Microsoft\Signatures\peterstow logo2.jpg] >> >> Peter Johnson >> I.T Architect >> United Kingdom: +44 1285 658542 >> South Africa: +27 11 252 1100 >> Swaziland: +268 442 7000 >> Fax:+27 11 974 7130 >> Mobile: +2783 306 0019 >> xxxxxxxxxxxxxxxx >> www.peterstow.com >> >> >> >> *This email message (including attachments) contains information which >> may be confidential and/or legally privileged. Unless you are the intended >> recipient, you may not use, copy or disclose to anyone the message or any >> information contained in the message or from any attachments that were sent >> with this email, and If you have received this email message in error, >> please advise the sender by email, and delete the message. Unauthorised >> disclosure and/or use of information contained in this email may result in >> civil and criminal liability. Everything in this e-mail and attachments >> relating to the official business of Peterstow Aquapower is proprietary to >> the company. >> >> Caution should be observed in placing any reliance upon any information >> contained in this e-mail, which is not intended to be a representation or >> inducement to make any decision in relation to Peterstow Aquapower. Any >> decision taken based on the information provided in this e-mail, should only >> be made after consultation with appropriate legal, regulatory, tax, >> technical, business, investment, financial, and accounting advisors. Neither >> the sender of the e-mail, nor Peterstow Aquapower shall be liable to any >> party for any direct, indirect or consequential damages, including, without >> limitation, loss of profit, interruption of business or loss of information, >> data or software or otherwise. >> >> The e-mail address of the sender may not be used, copied, sold, disclosed >> or incorporated into any database or mailing list for spamming and/or other >> marketing purposes without the prior consent of Peterstow Aquapower. *** >> >> *No warranties are created or implied that an employee of Peterstow >> Aquapower and/or a contractor of Peterstow Aquapower is authorized to create >> and send this e-mail.** *** >> >> * **[image: Description: >> C:\Users\PeterTJ\AppData\Roaming\Microsoft\Signatures\environment2.jpg]* >> > >
| | | |
| mrbusdriversir
Posts:9
 | | 09/02/2010 2:02 PM |
| You are correct on this. The GPO will overwrite the changes.
What I would do is to put that server on its own OU and block inheritance. Then create a GPO just for that OU with automatic updates enable.
I hope that helps.
Dagoberto Estrada Utah transit Authority 801-287-2310 -------------------------- Sent from my BlackBerry Wireless Handheld
________________________________ From: xxxxxxxxxxxxxxxx <xxxxxxxxxxxxxxxx> To: xxxxxxxxxxxxxxxx <xxxxxxxxxxxxxxxx> Sent: Thu Sep 02 05:09:23 2010 Subject: Re: [gptalk] Odd WSUS policy request.
wont the GPO over ride when the machine is restarted?
you could block heritiance of the WSUS policy on that server by the OU
On 2 September 2010 05:16, Anders Blomgren <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>> wrote: Couldn't you just set HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer to 0 (zero)?
-Anders
On Thu, Sep 2, 2010 at 10:52 AM, Peter Johnson <xxxxxxxxxxxxxxxx<mailto xxxxxxxxxxxxxxxx>> wrote:
Hi Guys
I’ve got an interesting one here. Been asked how to reset the WSUS policies on a machine that’s in a Small Business Server 2008 domain.
Basically the user is never in the network where the SBS server is. If the user is an admin on the box is there some way we can reset the WSUS policies so that the machine will download and install the updates directly from MS rather than requiring a connection to the WSUS server?
Thanks in advance. Regards
Peter Johnson I.T Architect United Kingdom: +44 1285 658542 South Africa: +27 11 252 1100 Swaziland: +268 442 7000 Fax:+27 11 974 7130 Mobile: +2783 306 0019 xxxxxxxxxxxxxxxx<mailto xxxxxxxxxxxxxxxx> www.peterstow.com<http://www.peterstow.com/>
This email message (including attachments) contains information which may be confidential and/or legally privileged. Unless you are the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message or from any attachments that were sent with this email, and If you have received this email message in error, please advise the sender by email, and delete the message. Unauthorised disclosure and/or use of information contained in this email may result in civil and criminal liability. Everything in this e-mail and attachments relating to the official business of Peterstow Aquapower is proprietary to the company.
Caution should be observed in placing any reliance upon any information contained in this e-mail, which is not intended to be a representation or inducement to make any decision in relation to Peterstow Aquapower. Any decision taken based on the information provided in this e-mail, should only be made after consultation with appropriate legal, regulatory, tax, technical, business, investment, financial, and accounting advisors. Neither the sender of the e-mail, nor Peterstow Aquapower shall be liable to any party for any direct, indirect or consequential damages, including, without limitation, loss of profit, interruption of business or loss of information, data or software or otherwise.
The e-mail address of the sender may not be used, copied, sold, disclosed or incorporated into any database or mailing list for spamming and/or other marketing purposes without the prior consent of Peterstow Aquapower. No warranties are created or implied that an employee of Peterstow Aquapower and/or a contractor of Peterstow Aquapower is authorized to create and send this e-mail.
| | | |
| chankster
Posts:4
 | | 09/02/2010 2:02 PM |
| I'm assuming that a machine that's never in contact with a wsus server wont refresh the policy either. If the policy isn't updated, you don't run gpupdate /force or have the setting enabled to always apply all policies then no, the GPO will not override.
-Anders
On Thu, Sep 2, 2010 at 1:09 PM, Tony Pearson Vinn <xxxxxxxxxxxxxxxx>wrote:
> wont the GPO over ride when the machine is restarted? > > you could block heritiance of the WSUS policy on that server by the OU > > On 2 September 2010 05:16, Anders Blomgren <xxxxxxxxxxxxxxxx> wrote: > >> Couldn't you just set >> HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer to 0 >> (zero)? >> >> -Anders >> >> On Thu, Sep 2, 2010 at 10:52 AM, Peter Johnson < >> xxxxxxxxxxxxxxxx> wrote: >> >>> >>> >>> Hi Guys >>> >>> >>> >>> I’ve got an interesting one here. Been asked how to reset the WSUS >>> policies on a machine that’s in a Small Business Server 2008 domain. >>> >>> >>> >>> Basically the user is never in the network where the SBS server is. If >>> the user is an admin on the box is there some way we can reset the WSUS >>> policies so that the machine will download and install the updates directly >>> from MS rather than requiring a connection to the WSUS server? >>> >>> >>> >>> Thanks in advance. >>> >>> Regards >>> >>> [image: Description: >>> C:\Users\PeterTJ\AppData\Roaming\Microsoft\Signatures\peterstow logo2.jpg] >>> >>> Peter Johnson >>> I.T Architect >>> United Kingdom: +44 1285 658542 >>> South Africa: +27 11 252 1100 >>> Swaziland: +268 442 7000 >>> Fax:+27 11 974 7130 >>> Mobile: +2783 306 0019 >>> xxxxxxxxxxxxxxxx >>> www.peterstow.com >>> >>> >>> >>> *This email message (including attachments) contains information which >>> may be confidential and/or legally privileged. Unless you are the intended >>> recipient, you may not use, copy or disclose to anyone the message or any >>> information contained in the message or from any attachments that were sent >>> with this email, and If you have received this email message in error, >>> please advise the sender by email, and delete the message. Unauthorised >>> disclosure and/or use of information contained in this email may result in >>> civil and criminal liability. Everything in this e-mail and attachments >>> relating to the official business of Peterstow Aquapower is proprietary to >>> the company. >>> >>> Caution should be observed in placing any reliance upon any information >>> contained in this e-mail, which is not intended to be a representation or >>> inducement to make any decision in relation to Peterstow Aquapower. Any >>> decision taken based on the information provided in this e-mail, should only >>> be made after consultation with appropriate legal, regulatory, tax, >>> technical, business, investment, financial, and accounting advisors. Neither >>> the sender of the e-mail, nor Peterstow Aquapower shall be liable to any >>> party for any direct, indirect or consequential damages, including, without >>> limitation, loss of profit, interruption of business or loss of information, >>> data or software or otherwise. >>> >>> The e-mail address of the sender may not be used, copied, sold, disclosed >>> or incorporated into any database or mailing list for spamming and/or other >>> marketing purposes without the prior consent of Peterstow Aquapower. *** >>> >>> *No warranties are created or implied that an employee of Peterstow >>> Aquapower and/or a contractor of Peterstow Aquapower is authorized to create >>> and send this e-mail.** *** >>> >>> * **[image: Description: >>> C:\Users\PeterTJ\AppData\Roaming\Microsoft\Signatures\environment2.jpg]* >>> >> >> >
| | | |
|
|