The Security Center GPO is under Computer – Administrative Templates – Windows Components – Security Center.  It can be turned off or on.

In the registry under HKLM\Software\Microsoft\Security Center there are the values that control the individual components and behavior:

I posted a similar question this week, although I’m not sure it’s exactly the same.  We have the Windows Update tray icon telling us Automatic Updates is not configured (you’re calling it the Security Center, so I’m not sure if that’s different or not).  Anyway, so far we’ve found two group policies:

Computer – Administrative Templates – Windows Components – Windows Updates: Allow non-administrators to receive update notifications.  If you configure this, it would rid you of the popup balloons for non-Admins, but the system tray icon would remain.

Computer – Administrative Templates – Windows Components – Windows Updates: Configure Automatic Updates.  Disabling this would rid you of the system tray icon.  We are looking at choosing this route.  I have tested on one machine already and SCCM still updates the system.  After all, it was “not configured” anyway (ie., not enabled nor disabled) so the warning you are getting is that it is not even configured.

I want to do more testing first to ensure this is the way to go and I would encourage you to test also to see if you get the result you want.

From what I gather, when the SCCM client is installed and configured to update the system, Computer – Administrative Templates – Windows Components – Windows Updates: Specify intranet Microsoft updates service location is enabled with the location of your Software Update Point.

If anyone else has any ideas, feel free to discuss.

Thanks.

I have check those log files.  I see no policy conflicts – As I mentioned, the scan and patch deployment process works perfectly w/o any issues.

I’ll review the logs once again.

When I go to the automatic updates applet in control panel, no options are selected. Weird I guess.

Thanks!

-Matt

If SCCM is applying the wsus settings I would not expect to see it popping up saying it is not configured. Maybe look in the wsus/patching logs in ccm/logs and see if he is having a problem applying policy.

From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Matt
Sent: Friday, July 10, 2009 9:46 AM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM - Patch Management - Disable XP Security Center Prompt

 Hello,

This maybe an easy question, I hope...

We are in the middle of testing our patch management strategy.  Everything is going perfect, the compliance/applicability scan cycle works and we’re able to successfully deployed updates to our test group using SCCM. J

The only issue we are having is the following:

The built-in Security Center for Windows XP SP3 systems is now sitting in the system tray.  When we click on the Security Center shield within the system tray to view the message, its indicating that ‘automatic updates is not configured’.

How can we disable the Security Center shield from being placed within the system tray using GPO without disabling the Security Center all together?

What settings should ‘automatic updates’ be configured as if we’re using SCCM for patch deployments?

I goal is to remove the Security Center shield from prompting the end-user because automatic updates isn’t configured however we still need it to prompt if no anti-virus is installed.

Thanks!!

-Matt

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

********************************************************************

This e-mail message is privileged, confidential and subject to
copyright. Any unauthorized use or disclosure is prohibited.

Le contenu du pr'esent courriel est privil'egi'e, confidentiel et
soumis `a des droits d'auteur. Il est interdit de l'utiliser ou de le
divulguer sans autorisation.

********************************************************************

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

This email is intended only for the above named recipients. The contents of the email and any attached files are confidential. If you have received this email in error you must not copy, forward, disclose the information contained in it, or otherwise use it in any way. Please notify the sender immediately and then delete the message and any attachments.

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/