Group Policy and SCCM

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

Group Policy and SCCM

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> Group Policy and SCCM

Page: [1]

Message

<< Older Topic Newer Topic >>

Group Policy and SCCM - 11/19/2008 3:38:06 AM

civan

Posts: 23
Score: 1
Joined: 5/30/2007
Status: offline

Hi everybody, I have a simple question to ask and it has to do with the Group Policy Management in relation to SCCM Should i have a GPO policy for Windows Update enabled or not? I am talking about the "Specify intranet Microsoft Update service location" setting and only this. What I have done is to enable this option and set my SCCM server the way it should be --> http://SCCMSERVER:8530 All other options into this group are set to "Not Configured". But my problem is that if I have it enabled as mentioned above, or if I leave it as "Not-configured", then I have the yellow shield appearing at the right bottom of the screen of my clients, prompting them to choose their options. On the other hand if I disable it, then SCCM cannot send any updates to the clients. Is there a way to have it enabled without having my users interfering with it? Many kind regards to all

Post #: 1

RE: Group Policy and SCCM - 11/19/2008 5:03:22 AM

SMSExpert

Posts: 193
Score: 39
Joined: 10/28/2008
Status: offline

You can do this as below:
1. Configure Automatic updates should be enabled and
2. Specify intranet Microsoft Update service location should be disabled.

Please check and confirm.
thanks...

(in reply to civan)

Post #: 2

RE: Group Policy and SCCM - 11/19/2008 6:34:56 AM

civan

Posts: 23
Score: 1
Joined: 5/30/2007
Status: offline

OK I did it as you say but the result is more or less the same.
At the clients all Windows update settings are grayed-out, but you can see that the first choice [Enable automatic updates] is selected.
The most annoying part is that the clients now download automatically directly from Microsoft [I guess],without me been able to control the process. Normally this should not happen.
Any ideas?

(in reply to SMSExpert)

Post #: 3

RE: Group Policy and SCCM - 11/19/2008 6:44:16 AM

skissinger

Posts: 2293
Score: 145
Joined: 9/13/2001
From: Sherry Kissinger
Status: offline

What I believe should happen is that GPO is no longer setting Automatic Updates' download location -- but your confirmgr client should be. (If you leave the GPO in place, the ConfigMgr client settings keep getting over-written by a higher authority)

_____________________________

mofmaster@smsexpert.com (version 2007) | http://www.smsexpert.com | http://www.sccmexpert.com
My Blog
Microsoft MVP - ConfigMgr

(in reply to civan)

Post #: 4

RE: Group Policy and SCCM - 11/19/2008 7:09:25 AM

civan

Posts: 23
Score: 1
Joined: 5/30/2007
Status: offline

Therefore I must delete any GPO related to this [set all options to "Not configured"] and let SCCM be in charge.

(in reply to skissinger)

Post #: 5

RE: Group Policy and SCCM - 11/19/2008 9:03:09 AM

civan

Posts: 23
Score: 1
Joined: 5/30/2007
Status: offline

That was it. I removed the GPO and now the "Windows Update settings" window at my client has all options cleared. Plus, at my lab PCs I received the balloon from SCCM warning about some updates that must be installed.
Thanks!

(in reply to skissinger)

Post #: 6