Re: Incorrect Behaviour

PTCapo wrote:

> Issue: Laptops are not adhering to WSUS rules setup in GPO.
>
> Configuration: We have a Patch Testing OU that gets WSUS updates
> approved ahead of the rest of production. However it seems that all
> Laptops, which are in a separate OU called Portable Workstations, are
> getting updates when they are released to the Patch Testing OU.
> Another oddity is that Laptops OU GPO has Notify for Download Notify
> for Install, but it is automatically downloading and Notifying for
> install - which is the GPO setting of the Patch Testing OU.
>
> My laptop WindowsUpdate.log file indicates I am in the correct OU and
> my GPRESULT shows I am pulling the correct GPO - so why is system
> acting like it is in the Patch Testing OU instead of the Portable
> Workstations GPO ????

What target group(s) does the WSUS server show the affected laptops in? Have
you doublechecked one of the updates that was downloaded to check that it was
only approved for the Patch Testing group?

The group policy controls the Windows Update Agent by setting registry values
which are documented here:

<http://technet.microsoft.com/en-us/library/cc708449%28WS.10%29.aspx?ppud=4>

http://technet.microsoft.com/en-us/l...29.aspx?ppud=4

Check the registry values on an affected machine to see whether they match up
with what you expect.

Harry.