| Author | Messages | |
DClaxton
Posts:9
 | | 06/09/2009 2:41 PM |
| When it comes to GPOs do Computer GPOs show up different then User GPOs?
I can make changes to Screen Saver settings, File and Print Sharing
settings and they populate out to the client computers, but when I make
changes to the Windows Update settings I don't see the changes on the
client computer.
Thanks for the help.
D~!
david.claxton
| | | |
| JamieNelson
Posts:0
| | 06/09/2009 3:21 PM |
| Not sure what you mean by showing up "different". GPOs are referred to
as "user" or "computer" based on the where the settings you want to
define reside (i.e. "Computer Configuration" or "User Configuration").
Technically a GPO can be both if you want. You can also disable one or
the other so that only the computer or user configuration is applied
(even if there are settings defined).
Which Windows Update settings are you trying to configure? Have you
tried running a GPResults Wizard query against that system? That will
show which GPOs are/are not being applied as well as the resultant
settings which will be enforced on the target machine.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 8:39 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPO : Windows Updates
When it comes to GPOs do Computer GPOs show up different then User GPOs?
I can make changes to Screen Saver settings, File and Print Sharing
settings and they populate out to the client computers, but when I make
changes to the Windows Update settings I don't see the changes on the
client computer.
Thanks for the help.
D~!
david.claxton
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| DClaxton
Posts:9
| | 06/09/2009 6:14 PM |
| I have changed : computer Configuration/Admin Templates/Windows
Components/Windows Updates/ Option 3 and 4 (Configure Auto Updates and
Specify location) and pushed it out.
On the client computer it doesn't show it has changed.
D~!
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, June 09, 2009 9:19 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
Not sure what you mean by showing up "different". GPOs are referred to
as "user" or "computer" based on the where the settings you want to
define reside (i.e. "Computer Configuration" or "User Configuration").
Technically a GPO can be both if you want. You can also disable one or
the other so that only the computer or user configuration is applied
(even if there are settings defined).
Which Windows Update settings are you trying to configure? Have you
tried running a GPResults Wizard query against that system? That will
show which GPOs are/are not being applied as well as the resultant
settings which will be enforced on the target machine.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 8:39 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPO : Windows Updates
When it comes to GPOs do Computer GPOs show up different then User GPOs?
I can make changes to Screen Saver settings, File and Print Sharing
settings and they populate out to the client computers, but when I make
changes to the Windows Update settings I don't see the changes on the
client computer.
Thanks for the help.
D~!
david.claxton
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
| | | |
| JamieNelson
Posts:0
| | 06/09/2009 6:59 PM |
| For starters, run a "gpupdate /force" from the command line and reboot
the computer. If it is still not working, check the following:
1. System is in an OU or sub-OU where the GPO is linked (and link
is enabled, of course)
2. Computer configuration policies are not disabled on the GPO (in
GPMC, select "Details" tab and look at the "GPO Status" drop down list)
3. WMI Filters on the GPO, if present, evaluate to true on the
subject computer
4. Security filtering on the GPO is configured for "Authenticated
Users" (or another group the computer is a member of)
5. There are no explicit deny "Apply Group Policy" or "Read" ACEs
for the computer or a group the computer is a member of (In GPMC, select
GPO then go to "Delegation" tab and click on "Advanced")
If you have the Group Policy Management Console installed, simply run a
"Group Policy Results Wizard" scan (very bottom of the Group Policy
Management console tree, then right-click "Group Policy Results"). This
will take a few seconds and give you back a nice HTML report which will
show you the following:
* Summary tab - Applied/denied GPOs with the link locations (if
denied it will show you the reason why); Security group membership, WMI
Filter status
* Settings tab - All of the policy settings being applied to
that computer, as well as the source GPO for each setting
* Policy events - Policy related events from that system's event
log
Hopefully this helps you out some. J
Regards,
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 12:14 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
I have changed : computer Configuration/Admin Templates/Windows
Components/Windows Updates/ Option 3 and 4 (Configure Auto Updates and
Specify location) and pushed it out.
On the client computer it doesn't show it has changed.
D~!
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, June 09, 2009 9:19 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
Not sure what you mean by showing up "different". GPOs are referred to
as "user" or "computer" based on the where the settings you want to
define reside (i.e. "Computer Configuration" or "User Configuration").
Technically a GPO can be both if you want. You can also disable one or
the other so that only the computer or user configuration is applied
(even if there are settings defined).
Which Windows Update settings are you trying to configure? Have you
tried running a GPResults Wizard query against that system? That will
show which GPOs are/are not being applied as well as the resultant
settings which will be enforced on the target machine.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 8:39 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPO : Windows Updates
When it comes to GPOs do Computer GPOs show up different then User GPOs?
I can make changes to Screen Saver settings, File and Print Sharing
settings and they populate out to the client computers, but when I make
changes to the Windows Update settings I don't see the changes on the
client computer.
Thanks for the help.
D~!
david.claxton
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
| | | |
| DClaxton
Posts:9
| | 06/09/2009 9:11 PM |
| Thanks Jamie.
I looked at my computer then I ran the Group Policy Results Wizard
(GPRW).
With gpedit.msc it says some options are not enabled/disabled.
With GPRW it's says everything is enabled/disabled the way it should be.
I will just trust the GPRW!
Thanks again.
D~!
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, June 09, 2009 12:58 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
For starters, run a "gpupdate /force" from the command line and reboot
the computer. If it is still not working, check the following:
1. System is in an OU or sub-OU where the GPO is linked (and link
is enabled, of course)
2. Computer configuration policies are not disabled on the GPO (in
GPMC, select "Details" tab and look at the "GPO Status" drop down list)
3. WMI Filters on the GPO, if present, evaluate to true on the
subject computer
4. Security filtering on the GPO is configured for "Authenticated
Users" (or another group the computer is a member of)
5. There are no explicit deny "Apply Group Policy" or "Read" ACEs
for the computer or a group the computer is a member of (In GPMC, select
GPO then go to "Delegation" tab and click on "Advanced")
If you have the Group Policy Management Console installed, simply run a
"Group Policy Results Wizard" scan (very bottom of the Group Policy
Management console tree, then right-click "Group Policy Results"). This
will take a few seconds and give you back a nice HTML report which will
show you the following:
* Summary tab - Applied/denied GPOs with the link locations (if
denied it will show you the reason why); Security group membership, WMI
Filter status
* Settings tab - All of the policy settings being applied to
that computer, as well as the source GPO for each setting
* Policy events - Policy related events from that system's event
log
Hopefully this helps you out some. J
Regards,
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 12:14 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
I have changed : computer Configuration/Admin Templates/Windows
Components/Windows Updates/ Option 3 and 4 (Configure Auto Updates and
Specify location) and pushed it out.
On the client computer it doesn't show it has changed.
D~!
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, June 09, 2009 9:19 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
Not sure what you mean by showing up "different". GPOs are referred to
as "user" or "computer" based on the where the settings you want to
define reside (i.e. "Computer Configuration" or "User Configuration").
Technically a GPO can be both if you want. You can also disable one or
the other so that only the computer or user configuration is applied
(even if there are settings defined).
Which Windows Update settings are you trying to configure? Have you
tried running a GPResults Wizard query against that system? That will
show which GPOs are/are not being applied as well as the resultant
settings which will be enforced on the target machine.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 8:39 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPO : Windows Updates
When it comes to GPOs do Computer GPOs show up different then User GPOs?
I can make changes to Screen Saver settings, File and Print Sharing
settings and they populate out to the client computers, but when I make
changes to the Windows Update settings I don't see the changes on the
client computer.
Thanks for the help.
D~!
david.claxton
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
| | | |
| JamieNelson
Posts:0
| | 06/09/2009 9:50 PM |
| If you're just running gpedit.msc on the target machine all you are
really looking at is the Local Policy object. Sounds like that was your
problem. J
Glad you figured it out.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 3:12 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
Thanks Jamie.
I looked at my computer then I ran the Group Policy Results Wizard
(GPRW).
With gpedit.msc it says some options are not enabled/disabled.
With GPRW it's says everything is enabled/disabled the way it should be.
I will just trust the GPRW!
Thanks again.
D~!
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, June 09, 2009 12:58 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
For starters, run a "gpupdate /force" from the command line and reboot
the computer. If it is still not working, check the following:
1. System is in an OU or sub-OU where the GPO is linked (and link
is enabled, of course)
2. Computer configuration policies are not disabled on the GPO (in
GPMC, select "Details" tab and look at the "GPO Status" drop down list)
3. WMI Filters on the GPO, if present, evaluate to true on the
subject computer
4. Security filtering on the GPO is configured for "Authenticated
Users" (or another group the computer is a member of)
5. There are no explicit deny "Apply Group Policy" or "Read" ACEs
for the computer or a group the computer is a member of (In GPMC, select
GPO then go to "Delegation" tab and click on "Advanced")
If you have the Group Policy Management Console installed, simply run a
"Group Policy Results Wizard" scan (very bottom of the Group Policy
Management console tree, then right-click "Group Policy Results"). This
will take a few seconds and give you back a nice HTML report which will
show you the following:
* Summary tab - Applied/denied GPOs with the link locations (if
denied it will show you the reason why); Security group membership, WMI
Filter status
* Settings tab - All of the policy settings being applied to
that computer, as well as the source GPO for each setting
* Policy events - Policy related events from that system's event
log
Hopefully this helps you out some. J
Regards,
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 12:14 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
I have changed : computer Configuration/Admin Templates/Windows
Components/Windows Updates/ Option 3 and 4 (Configure Auto Updates and
Specify location) and pushed it out.
On the client computer it doesn't show it has changed.
D~!
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, June 09, 2009 9:19 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPO : Windows Updates
Not sure what you mean by showing up "different". GPOs are referred to
as "user" or "computer" based on the where the settings you want to
define reside (i.e. "Computer Configuration" or "User Configuration").
Technically a GPO can be both if you want. You can also disable one or
the other so that only the computer or user configuration is applied
(even if there are settings defined).
Which Windows Update settings are you trying to configure? Have you
tried running a GPResults Wizard query against that system? That will
show which GPOs are/are not being applied as well as the resultant
settings which will be enforced on the target machine.
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of David Claxton
Sent: Tuesday, June 09, 2009 8:39 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPO : Windows Updates
When it comes to GPOs do Computer GPOs show up different then User GPOs?
I can make changes to Screen Saver settings, File and Print Sharing
settings and they populate out to the client computers, but when I make
changes to the Windows Update settings I don't see the changes on the
client computer.
Thanks for the help.
D~!
david.claxton
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
| | | |
|
|