I am running WSUS 3.0 SP1 on a 2003 box. I have Approved Windows XP SP3 and Windows IE7 for install but they do not get installed. all other security updates etc get installed. the update log does not show any errors it has logged that there are 2 updates.
Do i need to do anything particular with these updates to make them install?
Yes I accepted the EULA on approval. the only way I can get them to install is if I am logged on as an admin and I click the tray icon but this kind of defeats the purpose of setting up WSUS to install them automatically.
I have read a post elsewhere suggesting that anti virus programs may affect the extraction process in the C:\Windows\SoftwareDistribution\Downloads folder on the Client where the Service pack is being downloaded to. so I have set our anti virus to ignore this folder when scanning.
Do you have a group policy configured to allow non-admins to install updates? Check out this article, it gives a description of configuring group policies for WSUS updates:
Setting State Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box Enabled Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box Not configured Configure Automatic Updates Enabled Auto Download and Schedule install Every Saturday 08:00:00 Specify intranet Microsoft update service location Enabled \\Servername:8530 Enable client-side targeting Enabled Domain PC's Reschedule Automatic Updates scheduled installations Enabled 10 mins No auto-restart for scheduled Automatic Updates installations Not configured Automatic Updates detection frequency Enabled 1 hour Allow Automatic Updates immediate installation Enabled Delay Restart for scheduled installations Not configured Re-prompt for restart with scheduled installations Not configured Allow non-administrators to receive update notifications Disabled Enable recommended updates via Automatic Updates Enabled Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates Enabled Allow signed content from intranet Microsoft update service location Enabled
I do not want to allow non admin to receive update notifications for two reasons i want to do it at the weekend when the network is quiet and second most of our users would panic at the site of the notification and my phone would ring off the hook with support calls. They generally aren't very good at even the most basic IT tasks.
The configure automatic updates option is already enabled and configured for saturday at 08:00. i have removed they're ability to shutdown the PC so short of someone pulling the plug they all remain on.
I think what i will do is just write a script to push SP3 & IE7 out manually untill i figure this out for future reference.