IT Knowledge Base

It is actually very easy to get Windows 7 GPO Settings on a Windows 2008 Server. You just need to copy the %systemroot%\PolicyDefinitions from your Windows 7 machine into \\YOURSERVER\C$\Windows\SYSVOL\YOURDOMAIN\Policies\PolicyDefinitions on your server. After that you start your policy editor and you will find it under the section administrative templates.

Installation
1. Download it from http://www.microsoft.com/wsus
2. Make sure following roles are installed on the Server:

• MS Internet Information Server 7
• – ASP.NET
• – 6.0 Management Compatibility
• – IIS Metabase Compatibility
• – Windows Authentication

And install Microsoft Report Viewer Redistributable 2005
[http://go.microsoft.com/fwlink/?LinkID=70410]

3. Run the downloaded setup and follow the wizard

Configure WSUS so Computer are assigned via GPO
1. Open WSUS Console
2. Go to Computer/All Computers and create there a new Computer Group
3. Go to Options/Computers and choose “Use Group Policy or registry settings on computers.”
4. Open Group Policy Management Console
5. Create a New Group Policy and Link it to the right OU
6. WSUS Settings you will find in: Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Update
7. Enable “intranet Microsoft update service location”
Intranet Update Service: http://yourwsusserver/
Intranet Statistics Server: http://yourwsusserver/
8. Enable “Client Side Targeting”
Target Group: Computer Group you created in WSUS (See step 3)
9. Check the other useful settings like Configure Automatic Updates and No Auto-Restart with logged on users
10. Restart one of the client computers and check if they are in WSUS Console listed in your new created computer group.

The easiest way to find out if the group policy is applied and really changed the right settings you can check it in registry.

Go to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate