Group Policy Objects

Topic

New Reply

I’ve been having a Lot of Fun with Windows Server Update Services, trying to get all the computers which exist in Active Directory to appear in the WSUS console. So far I just get the server on which I ran the various installs. I set up an instance of Group Policy Object Editor, and a Group Policy for WSUS, but I can’t find how to make it apply to all the workstations! GPRESULT on one of these shows that the only Policy which has been applied is the Default Domain Policy.

See my graphic, which I’d appreciate any comment on the correctness of. Everything is as I found it originally, bar the new WSUS policy with the blobs after it!

John

Reply | Quote

Replies

John,

I can see that you have created your GPO in the domain, but have you linked it to somewhere (it needs to be linked to either the Domain or to an OU within the domain).

According to this article…

---

To link a GPO to your production OU

Reply | Quote

Thanks, Stuart – I have never seen anything about “linking the group policy” to anything! I don’t have any OUs (that I know about!), so I will read the article to see if it gives me any clues about how to “link the group policy to the domain” (not even sure I know what that actually means!).

Time to find out more about group policies. And not helped by the fact that my Group Policy Object Editor MMC keeps deleting itself…!

John

Reply | Quote

Have you tried right clicking on the Domain in the MMC?

StuartR

Reply | Quote

I tried right-clicking on everying that was present — but I wasn’t looking for “linking to the domain” at the time! Will try again tomorrow…

Thanks

John

Reply | Quote

I’m getting a bit further forward. Right-clicking on the Domain as suggested gave the information that the WSUS policy was “already linked to the domain”, but (copy) dragging and dropping the WSUS policy onto the domain worked!

So it was just a matter of correcting the error I’d made in the file-server name in one place, doing gpaudit /force on each PC, and waiting for PCs to appear in the WSUS console. I made a change half-way through to get the PCs to appear in the Unassigned Computers group (from the All Computers group) and now I have half which show up and the remainder as just “managed by this server”, but not visible. Lots more waiting needed, perhaps, for it to sort itself out?

Thanks again, Stuart!

John

Reply | Quote