Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win Software Update Server


  • Please log in to reply
13 replies to this topic

#1 Reddoug

Reddoug

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 03 September 2011 - 11:04 AM

Hi All

I have setup a WSUS server and it make a change to the client computers. Everything in the update control panel is grayed out. The reason I setup to WSUS is I volunteer at a Computers for Schools and trying to save bandwidth downloading Microsoft updates after we install Windows XP. (over 100 updates) After computer is setup I need to enable automatic updates. I changed the domain back to a workgroup but automatic updates stays grayed out. I found an update entry in the registry but I do not know what to change it to.

Thanks, Doug

BC AdBot (Login to Remove)

 


#2 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 03 September 2011 - 11:05 AM

P.S. WSUS is installed on Server 2008 R2.

#3 dirtdog900

dirtdog900

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:06 AM

Posted 03 September 2011 - 01:31 PM

Are you running any group policies? You may need to modify these, that's usually why it's greyed out on a domain setup.

#4 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 03 September 2011 - 08:20 PM

Hi

I have the group policies set on the server. I did not set anything on the client computer. I just had the client computer join the domain.

Thanks for the reply, Doug

#5 dirtdog900

dirtdog900

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:06 AM

Posted 04 September 2011 - 05:38 AM

Try running gpresult/rsop in a command line (on a workstation), that should show you if you are actually picking up a policy from somewhere, are there other workstations on the domain and with the same issue?

#6 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 04 September 2011 - 09:22 AM

Hi

This is a test environment with one server and one laptop. I will run the command on Tuesday morning and report the results.

Thanks, Doug

#7 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 06 September 2011 - 09:51 AM

Hi

I looked in the account Software Restriction Policy, Says No Software Restriction Policies Defined.

gpresult/rsop did not work. I found gpresult /R would provide the output you requested.



C:\Users\Administrator.CFSSERVER1>gpresult /R

Microsoft ® Windows ® Operating System Group Policy Result tool v2.0
Copyright © Microsoft Corp. 1981-2001

Created On 9/6/2011 at 9:36:01 AM


RSOP data for CFS\Administrator on CFSSERVER1 : Logging Mode
-------------------------------------------------------------

OS Configuration: Primary Domain Controller
OS Version: 6.1.7601
Site Name: Default-First-Site-Name
Roaming Profile: N/A
Local Profile: C:\Users\Administrator.CFSSERVER1
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=CFSSERVER1,OU=Domain Controllers,DC=cfs,DC=local
Last time Group Policy was applied: 9/6/2011 at 9:34:46 AM
Group Policy was applied from: CFSSERVER1.cfs.local
Group Policy slow link threshold: 500 kbps
Domain Name: CFS
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Default Domain Controllers Policy
Default Domain Policy
Update policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups
-------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Pre-Windows 2000 Compatible Access
BUILTIN\Users
Windows Authorization Access Group
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
CFSSERVER1$
Domain Controllers
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Denied RODC Password Replication Group
System Mandatory Level


USER SETTINGS
--------------
CN=Administrator,CN=Users,DC=cfs,DC=local
Last time Group Policy was applied: 9/6/2011 at 8:15:50 AM
Group Policy was applied from: CFSSERVER1.cfs.local
Group Policy slow link threshold: 500 kbps
Domain Name: CFS
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
N/A

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Default Domain Policy
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Update policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups
---------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Users
BUILTIN\Pre-Windows 2000 Compatible Access
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Domain Admins
Group Policy Creator Owners
Schema Admins
Enterprise Admins
Denied RODC Password Replication Group
High Mandatory Level

C:\Users\Administrator.CFSSERVER1>

Thanks for your help.
Doug

#8 Baltboy

Baltboy

    Bleepin' Flame Head


  • Members
  • 1,432 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pennsylvania
  • Local time:01:06 AM

Posted 06 September 2011 - 10:11 AM

Did you add the computer to the WSUS server using the computers page? Check out this linkfor more information.
Get your facts first, then you can distort them as you please.
Mark Twain

#9 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 06 September 2011 - 08:48 PM

HI

I did. I created up group called "update group" and made the computer a member and the computer shows up in the WSUS. I looked in the security policy and did not see anything to change. I just looked at services on my computer and found a service for automatic updates. I will look into that on Thursday when I get back to the computer center.

Thanks again for your help.

Doug

#10 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 08 September 2011 - 10:34 AM

Hi

Looked in client computer and found automatic updates is set to start automatically is services.

Stumped

Thanks, Doug

#11 dirtdog900

dirtdog900

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:06:06 AM

Posted 08 September 2011 - 12:06 PM

Did you run gpresult on the server or a workstation? There does appear to be a policy being applied though, is this an SBS server? Can you disable any policies, reboot the workstation and then check again?

#12 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 11 September 2011 - 06:13 PM

Hi

I ran gpresult on the server. It is not an SBS server. We are just trying to come up with a way to install all the updates quicker than downloading them every time we set up a computer. We do not have the fastest DSL connection. I will get back to the computer on Thursday morning.

Thanks for the help.
Doug

#13 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 15 September 2011 - 10:21 AM

Hi

I tried changing settings in group policy on client computer. Someone told me that once the computer has joined a domain there is no way to completely remove it from the domain, said Microsoft makes some change that can not be change without wiping the drive and reinstalling the O.S. I tried changing client computer back to workgroup and changed the name. I can not get the automatic updated screen to where I can enable options. All are grayed out.

Thanks, Doug

#14 Reddoug

Reddoug
  • Topic Starter

  • Members
  • 115 posts
  • OFFLINE
  •  
  • Local time:12:06 AM

Posted 15 September 2011 - 12:56 PM

Hi

Found the solution to my problem on Google. Found that I had to leave the client computer hooked to the domain controller when I changed it back to a workgroup computer that it would not do if I had the computer disconnected from the netwo0rk. It said it made some changes when removing it from the domain. Now all the option are available in the update control panel.

Thanks again for the help.
Doug




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users