If you're using SUS and you don't approve SP2 for download, the clients will not get SP2 from SUS.
If the clients have enough privileges to visit, download and install software from the Windows Update site then they will receive the update from Windows Update IF they visit the site and check for downloads. The same is true for Automatic Updates... If you are using SUS, then your clients should NOT be visiting the Windows Update site nor should they be configured for Automatic Updates (except through SUS of course). (I could ask why your clients have permissions to install such software, but that's another issue.....) Joe Pochedley A computer terminal is not some clunky old television with a typewriter in front of it. It is an interface where the mind and body can connect with the universe and move bits of it about. -Douglas Adams -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abbiss, Mark Sent: Tuesday, March 15, 2005 5:47 AM To: [email protected] Subject: RE: [ActiveDir] OT: Blocking SP2 rollout The problem with this is that all the information I have read tells me that as of April 12th the GPO/registry hacks that you put in place are ignored and SP2 begins its merry way task of downloading itself and installing. This is whether you use Automatic Updates or SUS. So as soon as I make any effort to patch my machines they are going to get XP2. Or can I continue to block SP2 but allow all other patches ? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, March 11, 2005 5:35 PM To: [email protected] Subject: RE: [ActiveDir] OT: Blocking SP2 rollout Hi Mark... You can just put a software restriction hash GPO on it, and disallow it until you want it. Then you can just remove it, when you wish. John <[EMAIL PROTECTED] com> Sent by: To [EMAIL PROTECTED] <[email protected]> ail.activedir.org cc Subject 03/11/2005 10:25 RE: [ActiveDir] OT: Blocking SP2 AM rollout Please respond to [EMAIL PROTECTED] tivedir.org As long as you donât approve it, SP2 will not be deployed by SUS/WUS. However, your users can still use something like Windows Update to manually pull it down and install it on their own. Rather than delaying SP2 deployment, why not work on resolving the issues that you anticipate having with SP2 when it is deployed? Deji -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abbiss, Mark Sent: Friday, March 11, 2005 7:10 AM To: [email protected] Subject: [ActiveDir] OT: Blocking SP2 rollout My apologies for posting this here but I am not get clear answers from other places I have asked this question. As you no doubt know, MS are forcing an XP SP2 rollout as of 12th April this year. We have SUS in our environment and have downloaded the SP2 package but set the "not approved" flag. What I want to know is can I block SP2 indefinitely or will it unleash itself onto my network on the 12th ? If I can block it for as long as want, what is the best way to do it ? We do want SP2 for all of our clients, we just dont want it yet ! Many thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/[EMAIL PROTECTED] Vry&-4ibb .BÃvrzÃryi [EMAIL PROTECTED] šŠV«r¯yÊ&ý§-Š÷4™¨¥iËb½çb®Šà
