Just got this in an Email. Thanks!

Posted Thursday, September 01, 2005 8:02 AM by Anonymous

I just got this in my email in regards to the Automatic Updates issue I was having.  This community is great.  Thanks Aaron!

Tim -
        Re your post this morning on wuauserv via GP - it's even easier than that:  just grant Authenticated Users (or Everyone) Read access to the service in the GPO in which you enable the service.  And this should only affect XP, but I don't remember if SP1 or SP2….

For example, here's a copy/paste from GPMC:

Automatic Updates (Startup Mode: Automatic)hide
Permissions

Type    Name    Permission     
Allow   BUILTIN\Administrators  Full Control   
Allow   NT AUTHORITY\Authenticated Users        Read   
Allow   NT AUTHORITY\INTERACTIVE        Read   
Allow   NT AUTHORITY\SYSTEM     Full Control   
Auditing

Type    Name    Access 
Failure Everyone        Full Control   

The line highlighted in Red is what I added to make it work.  Set it once in the GPO and forget it.

Enjoy!

Aaron  :)


 

Aaron M. Czechowski
Desktop Management Engineer
Server Administration and Engineering
Office of Technology Services
Towson University
(410) 704 - 4591
www.towson.edu/~aczech

Filed under: ,

Comments

No Comments