[Samba] Administrator rights for Windows update?

RRuegner robert at ruegner.org
Fri May 7 13:20:57 GMT 2004


Hi , it just much more easy to do this setup, with a policy
which has a nice gui and its working proper
Best Regards
Jeramy Eling schrieb:

> You can use the registry on each machine to set the settings for SUS, the following keys can be modified to set the required settings after you have installed the SUS client:-
> 
> HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU (Might need to be created)
> 
> NoAutoUpdate
> Range = 0|1. 0 = Automatic Updates is enabled (default), 1 = Automatic Updates is disabled.
> Registry Value Type: Reg_DWORD
> 
> AUOptions 
> Range = 2|3|4. 2 = notify of download and installation, 3 = automatically download and notify of installation, and 4 = automatic download and scheduled installation. All options notify the local administrator.
> Registry Value Type: Reg_DWORD
> 
> ScheduledInstallDay
> Range = 0|1|2|3|4|5|6|7. 0 = Every day; 1 through 7 = the days of the week from Sunday (1) to Saturday (7). 
> Registry Value Type: Reg_DWORD
> 
> ScheduledInstallTime 
> Range = n; where n = the time of day in 24-hour format (0-23). 
> Registry Value Type: Reg_DWORD
> 
> UseWUServer
> Set this to 1 to enable Automatic Updates to use the server running Software Update Services as specified in WUServer below.
> Registry Value Type: Reg_DWORD
> 
> HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
> 
> WUServer 
> Sets the Software Update Services server by HTTP name (for example, http://IntranetSUS).
> Registry Value Type: Reg_SZ
> 
> WUStatusServer 
> Sets the Software Update Services statistics server by HTTP name (for example, http://IntranetSUS).
> Registry Value Type: Reg_SZ
> 
> You use a .reg file and have it applied in a login script in theory. I have done this for other applications to make registry changes in the past and it seems to work ok. However I have never applied it using a samba server as I am a complete Active Directory shop and use GPO instead. There is a document on www.microsoft.com/sus which details the deployment of an SUS server.
> 
> Hope this helps
> 
> Jez
> 
> -----Original Message-----
> From: samba-bounces+jeramy.eling=britax-pmg.com at lists.samba.org
> [mailto:samba-bounces+jeramy.eling=britax-pmg.com at lists.samba.org]On
> Behalf Of Clint Sharp
> Sent: 07 May 2004 08:29
> To: Andrew Bartlett
> Cc: samba; Nicki Messerschmidt
> Subject: Re: [Samba] Administrator rights for Windows update?
> 
> 
> Andrew Bartlett wrote:
> 
> 
>>On Thu, 2004-05-06 at 22:43, Nicki Messerschmidt wrote:
>> 
>>
>>SUS works surprisingly well, but I think you can just set a policy for
>>the machines to update themselves automatically from the master site if
>>you wish. 
>>
>>Andrew Bartlett
>>
>> 
>>
> 
> We're considering a SUS deployment.  What are you (or others on the 
> list) doing to push the policy to tell the clients which SUS server to 
> pull the updates from and when?  From the Microsoft documentation I 
> read, it appears this is best achieved through GPO, which is obviously 
> not an option with a Samba PDC.  I've considered using regmon to see 
> what changes GPO writes and adding these to a login script (using runas 
> and sanur to install the settings from the login script, like we do for 
> most everything that requires admin privs), but I was hoping someone had 
> already solved this problem.  Ideas?
> 
> Clint



More information about the samba mailing list