Windows Forum

Ask something
Discussion Locked

SUS/ Auto updates2.2 win2ksvr&xpclient

0 helpful
10 replies

by dubplate_acetate

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

hello,

i have installed, configured and syncronised microsoft software update services. SUS is installed on an win2k server. I have a win2k domain, with xp clients.

now i am trying to get the clients to update from the SUS server, instead of windowsupdate.com.

i know i need to setup a group policy, but i am unsure of how to do this. i have searched techent, all i could find is how to acheive this with a win2k3server. url= http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/deployguide/dmebh_sus_wviy.asp

i know that the xp clients have to have automatic updates 2.2 but i am sure this is installed with xp sp1. xp sp1 is installed on every xp client.

can someone show me how to create a group policy that makes the xp clients connect to the SUS server instead of the default windowsupdate.com??

thanks for your efforts,

10 replies

by joseph moore

I will patch a rather lenghty BAT file that you can run that will configure the Automatic Updates for your clients to point to your SUS server. You can have this file be inported using Group Policy.
In the file, it will create a temp .REG file that will then be imported.
I am not sure how clean the file will be when I post it. When you post long strings of text here at Techrepublic, you get extra spaces that mess things up. So, if the posting in this forum doesn't come out clean enough, feel free to send me a message via the Peer Directory.
I run this file at my company, and it works with no problems.

by joseph moore

@echo off

setlocal

set regfile=%systemdrive%\temp\SUS.reg

ECHO Stopping Automatic Updates service
Net Stop "wuauserv"

ECHO.
ECHO Configuring SUS server registry entries. Please stand by....

echo Windows Registry Editor Version 5.00>%regfile%
echo.>>%regfile%
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]>>%regfile%
echo "WUServer"="http://IP_OF_YOUR_SUS_SERVER">>%regfile%
echo "WUStatusServer"="http://IP_OF_YOUR_SUS_SERVER">>%regfile%
echo.>>%regfile%
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]>>%regfile%
echo "NoAutoUpdate"=dword:00000000>>%regfile%
REM
REM 4=Automatically downloads updates. Installation will occur at the scheduled
REM day/time. While scheduled, an Admin-priv user will see a brief balloon and
REM systemtray icon, this allows the update to be installed before the scheduled time.
echo "AUOptions"=dword:00000004>>%regfile%
echo "ScheduledInstallDay"=dword:00000000>>%regfile%
echo "ScheduledInstallTime"=dword:0000000C>>%regfile%
REM
REM 15=If the computer is switched-off at the scheduled installation time, this setting will initiate
REM the installation at 15 minutes after restart.
echo "RescheduleWaitTime"=dword:00000015>>%regfile%
echo "NoAutoRebootWithLoggedOnUsers"=dword:00000001>>%regfile%
echo "UseWUServer"=dword:00000001>>%regfile%
echo.>>%regfile%
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Critical Update]>>%regfile%
echo "SelfUpdServer"="http://IP_OF_YOUR_SUS_SERVER/SelfUpdate/CUN5_4">>%regfile%
echo.>>%regfile%
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Critical Update\Critical Update SelfUpdate]>>%regfile%
echo "SelfUpdServer"="http://IP_OF_YOUR_SUS_SERVER/SelfUpdate/CUN5_4">>%regfile%
echo.>>%regfile%
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]>>%regfile%
echo "LastWaitTimeout"="">>%regfile%

by joseph moore

REM
REM 0=Initial 24 hour timeout
REM 1=Waiting for user to run AU wizard
REM 2=Detect pending
REM 3=Download pending (waiting for user to accept pre-downloaded prompt)
REM 4=Download in progress
REM 5=Install pending
REM 6=Install complete
REM 7=Disabled (Adoptions will also be set to a value of 0x1)
REM 8=Reboot pending
echo "AUOptions"=dword:00000004>>%regfile%
echo "AUState"=dword:00000002>>%regfile%
echo.>>%regfile%

regedit /s %regfile%

ECHO.
ECHO Registry import complete.
ECHO.
ECHO starting Automatic Updates service now.
Net Start "wuauserv"

erase %regfile%

endlocal

by joseph moore

Ok, piece that together, make sure the URLs are right for your SUS server (you will need to tweak them for your SUS server environment), then roll this out to your clients.

hope this helps

by dubplate_acetate

Poster rated this answer.
hi joseph, thanks so much for all your efforts. you solution is workable one, but i feel that evans solution below is what i have been looking for. i would like to split the points between you guys but i dont think thats possible. i am going to rate this as didnt help me, but in fact it gave me an insight into other peoples way of fixing problems.

thanks again

by dubplate_acetate

Poster rated this answer.
hi even, cheers, this helps me and is the way i would like to attack this issue. i might email you directly if i cant get it to work.

by pcnetworktech

First download this file to w2kserver and copy it to INF folder. To get to INF folder, just click Start | RUN and type INF.
http://www.microsoft.com/downloads/details.aspx?FamilyId=D26A0AEA-D274-42E6-8025-8C667B4C94E9&displaylang=en

1.In windows 2000 server go to Active Directory Users and Computers.
2. Right click on Computer Folder |Properties | Group Policy and Click New and then click on Edit.
3. Go to Computer Configuration |Right mouse click on Administrative template and click ADD. Here you will need to add the wuau.adm.
4. after adding this file. Close the Group policy and open again and to to "computer configuration" and Expand "Administrative template" and you will see "Windows update" folder. On the right side you will see three group policy options. You configure this as how best fits your need.

NOTE: This update SUS update SP1 will only work for client with Service pack 3.

This discussion is closed to new replies.