Quick SUS question/problem
Ok we are running SUS on our 500 machine domain. We have 2 SUS servers. The first server gets updates from Microsoft and we approve them and it gets pushed to 4 IT machines for us to evaluate for a couple days. Then we approve the updates on the second SUS box (SUS2) and the rest of the building gets them.
We have a company wide GPO for the windows update that goes as follows:
Configure automatic updating - 4 - auto download and schedule the install
Schedule install day - 0 Ever day
Scheduled install time 03:00
So my GPO is setup correctly as far as I can see. However many users, including myself get the windows update globe from time to time during the day. Problem is people see the globe and click on it and do manual updates. We don't want that.
Does anyone have any idea why we are getting the windows update globe when SUS should be handling all the updates?
CB
We have a company wide GPO for the windows update that goes as follows:
Configure automatic updating - 4 - auto download and schedule the install
Schedule install day - 0 Ever day
Scheduled install time 03:00
So my GPO is setup correctly as far as I can see. However many users, including myself get the windows update globe from time to time during the day. Problem is people see the globe and click on it and do manual updates. We don't want that.
Does anyone have any idea why we are getting the windows update globe when SUS should be handling all the updates?
CB
0 Comments
[ + ] Show comments
Answers (4)
Please log in to answer
Posted by:
craig16229
19 years ago
Are the users who see the balloon local admins of their machines?
Craig --<>.
Craig --<>.
Posted by:
A-Baum
19 years ago
Many of the users are local admins on their machines. I am unsure if it's happening on machines where people are not local admins.
Why would it matter if they're local admins? They could then install updates whenever they wanted, which would negate the concept of SUS. We don't want updates being installed during the day by the users.
Thanks,
CB
Why would it matter if they're local admins? They could then install updates whenever they wanted, which would negate the concept of SUS. We don't want updates being installed during the day by the users.
Thanks,
CB
Posted by:
OregonDave
19 years ago
I could be wrong, but I *think* that when a patch is downloaded and queued to install automatically, Windows still pops up the tray icon, to allow users to install ahead of time. But if this is the case, then only the patches you've approved should show in the list. Is it a problem if users install approved patches a couple hours earlier than the rest of the company?
Posted by:
craig16229
19 years ago
Here is a link that summarizes the balloon behavior relative to the configuration options:
http://www.susserver.com/FAQs/FAQ-AutoUpdateSettings.asp
Craig --<>.
http://www.susserver.com/FAQs/FAQ-AutoUpdateSettings.asp
Craig --<>.
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.