Getting all PCs to install automatic updates

The procedure for automating Windows Updates described in your July 12 column (www.nwfusion.com, DocFinder: 3029) might work for single PCs, but how can you do this if you have 500 PCs? I use Microsoft Software System Update Services (MS SUS) to update t

The procedure for automating Windows Updates described in your July 12 column (https://www.nwfusion.com/columnists/2004/071204internet.html) might work for single PCs, but how can you do this if you have 500 PCs?

I use Microsoft Software System Update Services (MS SUS) to update the operating system and have set a group policy at the domain level to update the system. I still have problems with systems that won’t install their automatic updates. What can I do to overcome this problem?

Readers using MS SUS have reported that enabling automatic updates to install rather than simply be downloaded to the local system requires ensuring that permissions and settings on the local machines are aligned with group policy so users and computer domain accounts have privileges in the appropriate user group on the local machine.

Windows doesn’t place domain users and groups in the local user groups automatically. Once those settings are in place and updates are working, you can use the GPEDIT.MSC console to modify the Windows Update template settings to disable automatic reboots for updates that require a system restart to take effect so that you don’t disrupt your users with surprise system restarts from automatic updates.

You might find you need to make additional adjustments, but it is possible to get Windows Updates to install automatically without giving users local administrator privileges.