SUS / Windows Update to Clients Issue

I am having problems with getting SUS to behave correctly
on our network and need some help.

I have set up SUS on a Win2k server running within a Win2k
AD corporate environment (about 350 users). I created a
couple of test OUs and moved our Help Desk computer
objects into one of the OUs and have applied a group
policy object to the OU with the following settings for
Windows Update: Configure Automatic Updates (enabled)-set
to option 4 - Auto download and schedule installs every
day; Specify Intranet Microsoft Update Service Location
(enabled)-set to http://(sus_server) for both the update
service and statistics server; Reschedule Auto Updates
Scheduled Installs (enabled) - set to 1 minute; No Auto
Restart for scheduled Automatic Updates Installations
(Disabled).

In the same GPO under Windows Settings, Security Settings,
System Services, I made sure that the Automatic Updates
service and the Background Intelligent Transfer Service
are enabled and set to Automatic.

I also made everyone reboot their computers to make sure
they get the new GPO applied to their computers, and
scheduled auto updates to run at a specific time. In
addition, the SUS server has been synchronized with the
latest windows updates.

The goal is to automatically download and install the
updates, and then automatically reboot the user's
computers with the shortest delay possible.

We are all logged in as admins, but I also created
a "regularjoe" test user with no admin rights.

On the first test, everything seemed to work fine, at
least on my workstation, although there were huge delays.
First, the updates downloaded and I got a message (the
globe in the right corner) stating that new updates were
doanloaded and were ready to install. I had to wait
another day, then the next day it stated that the updates
had been installed and that I needed to reboot my
computer. Now, however, there is another update available
at the Microsoft Update web site (GDI Detection Tool -
which is listed as a critical update) but the same
behavior is not occurring as before. The update is not
being downloaded to my workstation from SUS.

In addition, the regular joe user I created also has not
downloaded the update, even though I have left the user
logged onto the workstation for 2 days. I made sure the
computer for this user is in the same OU as the Help Desk
computers.

Any ideas what could be wrong? Thanks.

jc112 wrote:


> [snip] Now, however, there is another update available
> at the Microsoft Update web site (GDI Detection Tool -
> which is listed as a critical update) but the same
> behavior is not occurring as before. The update is not
> being downloaded to my workstation from SUS.
Hi

The GDI Detection Tool was removed as a SUSable update some time
ago (the tool does not do a good job, and it created error messages
for locked down users)...


Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsof...wareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserv...wareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx