On Tue, Feb 1, 2011 at 3:24 PM, Bob Hartung <[email protected]> wrote:
> When I setup XP PCs to get the WSUS GPO config, they continue to access the
> MS Windows Update website.

  Use GPRESULT (CLI) or RSOP.MSC (GUI) to make sure the policy is
actually applying properly.  This applies even for the machine-local
GPO.

  Check C:\Windows\WindowsUpdate.log for clues.

> Am I missing some kind of optional Windows XP update to make this work?

  We don't have to install anything special to get XP SP3 to honor our WSUS GPO.

  The GPO settings we use are:

Computer Config -> Admin Templates -> Windows Components -> Windows Update
Config Auto Updates = Enabled, 4 (Auto download & schedule install), 0
(Every day), 4:00 AM
Specify intranet service location = Enabled, http://foo [where "foo"
is the name of our WSUS server]
Reschedule installs = 60 minutes
No auto-restart = Disabled
Auto Update detect freq = 22 hours
Allow immediate install = Enabled

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to