Control Windows Services through grou policy

Justin

Distinguished
Apr 2, 2004
271
0
18,780
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Can I modify the status of a service through group policy??

I would like to change the status of the automatic updates service to
automatic and started through group policy. Can I do this. No point in
rolling out WUS if I can't ensure the service is running.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

"Justin55" wrote:
> Can I modify the status of a service through group policy??
>
> I would like to change the status of the automatic updates
> service to
> automatic and started through group policy. Can I do this.
> No point in
> rolling out WUS if I can't ensure the service is running.

Hi,

By default this service is running on all W2K and WXP clients.
However, the service setting is located in

Computer Config
Windows Settings
Security Settings
System Services

Make sure you do it on a Separate Computer OU and not the Domain OU.

Also, set the WUS Service here:
Comp Config
Admin Templates
Windows Components
Windows Update
"Configure Automatic Updates = Enabled"
"Specify Intranet Microsoft Update Service Location = Enabled"

By the way, if installing WUS, here are a few tips I learned the hard
way.

1> Make sure the Network Service has at least Read on the Root of the
drive you install WUS on.
2> Make sure the Domain Computers Group has Read on the WUS content
folder.

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-Control-Windows-Services-grou-ftopict344950.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1082258
 

Justin

Distinguished
Apr 2, 2004
271
0
18,780
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Yep that did it. I already had the GP to get set automatic updates to scan
for updates and install updates but if the service was disabled it didn't
work. Looked around for thoses settings everywhere and they were right in
front of me. Cheers

"lforbes" wrote:

> "Justin55" wrote:
> > Can I modify the status of a service through group policy??
> >
> > I would like to change the status of the automatic updates
> > service to
> > automatic and started through group policy. Can I do this.
> > No point in
> > rolling out WUS if I can't ensure the service is running.
>
> Hi,
>
> By default this service is running on all W2K and WXP clients.
> However, the service setting is located in
>
> Computer Config
> Windows Settings
> Security Settings
> System Services
>
> Make sure you do it on a Separate Computer OU and not the Domain OU.
>
> Also, set the WUS Service here:
> Comp Config
> Admin Templates
> Windows Components
> Windows Update
> "Configure Automatic Updates = Enabled"
> "Specify Intranet Microsoft Update Service Location = Enabled"
>
> By the way, if installing WUS, here are a few tips I learned the hard
> way.
>
> 1> Make sure the Network Service has at least Read on the Root of the
> drive you install WUS on.
> 2> Make sure the Domain Computers Group has Read on the WUS content
> folder.
>
> Cheers,
>
> Lara
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's request
> Articles individually checked for conformance to usenet standards
> Topic URL: http://www.windowsforumz.com/Group-Policy-Control-Windows-Services-grou-ftopict344950.html
> Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1082258
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

"Justin55" wrote:
> Yep that did it. I already had the GP to get set automatic
> updates to scan
> for updates and install updates but if the service was
> disabled it didn't
> work. Looked around for thoses settings everywhere and they
> were right in
> front of me. Cheers
>
> "lforbes" wrote:
>
> > "Justin55" wrote:
>  > > Can I modify the status of a service through group
> policy??
>  > >
>  > > I would like to change the status of the automatic
> updates
>  > > service to
>  > > automatic and started through group policy. Can I
> do this.
>  > > No point in
>  > > rolling out WUS if I can't ensure the service is
> running.
> >
> > Hi,
> >
> > By default this service is running on all W2K and WXP
> clients.
> > However, the service setting is located in
> >
> > Computer Config
> > Windows Settings
> > Security Settings
> > System Services
> >
> > Make sure you do it on a Separate Computer OU and not the
> Domain OU.
> >
> > Also, set the WUS Service here:
> > Comp Config
> > Admin Templates
> > Windows Components
> > Windows Update
> > "Configure Automatic Updates = Enabled"
> > "Specify Intranet Microsoft Update Service Location =
> Enabled"
> >
> > By the way, if installing WUS, here are a few tips I learned
> the hard
> > way.
> >
> > 1> Make sure the Network Service has at least Read on the
> Root of the
> > drive you install WUS on.
> > 2> Make sure the Domain Computers Group has Read on the
> WUS content
> > folder.
> >
> > Cheers,
> >
> > Lara
> >
> > --
> > Posted using the http://www.windowsforumz.com interface, at author's request
> > Articles individually checked for conformance to usenet
> standards
> > Topic URL: http://www.windowsforumz.com/Group-Policy-Control-Windows-Services-grou-ftopict344950.html
> > Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1082258
> >

Hi,

Glad to help. The service is usually not disabled unless you disabled
it. Also with XPSP2, it automatically turns it on again.

Glad you figured it out.

Cheers,
Lara
 

Justin

Distinguished
Apr 2, 2004
271
0
18,780
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Just a quick one what did you mean when you said to allow the network service
read on the root of the drive. I have just given the read to the domain
computers but how do i give the network service access.

"lforbes" wrote:

> "Justin55" wrote:
> > Yep that did it. I already had the GP to get set automatic
> > updates to scan
> > for updates and install updates but if the service was
> > disabled it didn't
> > work. Looked around for thoses settings everywhere and they
> > were right in
> > front of me. Cheers
> >
> > "lforbes" wrote:
> >
> > > "Justin55" wrote:
> > > > Can I modify the status of a service through group
> > policy??
> > > >
> > > > I would like to change the status of the automatic
> > updates
> > > > service to
> > > > automatic and started through group policy. Can I
> > do this.
> > > > No point in
> > > > rolling out WUS if I can't ensure the service is
> > running.
> > >
> > > Hi,
> > >
> > > By default this service is running on all W2K and WXP
> > clients.
> > > However, the service setting is located in
> > >
> > > Computer Config
> > > Windows Settings
> > > Security Settings
> > > System Services
> > >
> > > Make sure you do it on a Separate Computer OU and not the
> > Domain OU.
> > >
> > > Also, set the WUS Service here:
> > > Comp Config
> > > Admin Templates
> > > Windows Components
> > > Windows Update
> > > "Configure Automatic Updates = Enabled"
> > > "Specify Intranet Microsoft Update Service Location =
> > Enabled"
> > >
> > > By the way, if installing WUS, here are a few tips I learned
> > the hard
> > > way.
> > >
> > > 1> Make sure the Network Service has at least Read on the
> > Root of the
> > > drive you install WUS on.
> > > 2> Make sure the Domain Computers Group has Read on the
> > WUS content
> > > folder.
> > >
> > > Cheers,
> > >
> > > Lara
> > >
> > > --
> > > Posted using the http://www.windowsforumz.com interface, at author's request
> > > Articles individually checked for conformance to usenet
> > standards
> > > Topic URL: http://www.windowsforumz.com/Group-Policy-Control-Windows-Services-grou-ftopict344950.html
> > > Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1082258
> > >
>
> Hi,
>
> Glad to help. The service is usually not disabled unless you disabled
> it. Also with XPSP2, it automatically turns it on again.
>
> Glad you figured it out.
>
> Cheers,
> Lara
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

"Justin55" wrote:
> Just a quick one what did you mean when you said to allow the
> network service
> read on the root of the drive. I have just given the read to
> the domain
> computers but how do i give the network service access.
>
> "lforbes" wrote:
>
> > "Justin55" wrote:
>  > > Yep that did it. I already had the GP to get set
> automatic
>  > > updates to scan
>  > > for updates and install updates but if the service
> was
>  > > disabled it didn't
>  > > work. Looked around for thoses settings everywhere
> and they
>  > > were right in
>  > > front of me. Cheers
>  > >
>  > > "lforbes" wrote:
>  > >
>   > > > "Justin55" wrote:
>   > > > > Can I modify the status of a service
> through group
>  > > policy??
>   > > > >
>   > > > > I would like to change the status of
> the automatic
>  > > updates
>   > > > > service to
>   > > > > automatic and started through group
> policy. Can I
>  > > do this.
>   > > > > No point in
>   > > > > rolling out WUS if I can't ensure the
> service is
>  > > running.
>   > > >
>   > > > Hi,
>   > > >
>   > > > By default this service is running on all
> W2K and WXP
>  > > clients.
>   > > > However, the service setting is located in
>   > > >
>   > > > Computer Config
>   > > > Windows Settings
>   > > > Security Settings
>   > > > System Services
>   > > >
>   > > > Make sure you do it on a Separate Computer
> OU and not the
>  > > Domain OU.
>   > > >
>   > > > Also, set the WUS Service here:
>   > > > Comp Config
>   > > > Admin Templates
>   > > > Windows Components
>   > > > Windows Update
>   > > > "Configure Automatic Updates = Enabled"
>   > > > "Specify Intranet Microsoft Update Service
> Location =
>  > > Enabled"
>   > > >
>   > > > By the way, if installing WUS, here are a
> few tips I learned
>  > > the hard
>   > > > way.
>   > > >
>   > > > 1> Make sure the Network Service has at
> least Read on the
>  > > Root of the
>   > > > drive you install WUS on.
>   > > > 2> Make sure the Domain Computers Group
> has Read on the
>  > > WUS content
>   > > > folder.
>   > > >
>   > > > Cheers,
>   > > >
>   > > > Lara
>   > > >
>   > > > --
>   > > > Posted using the
> http://www.windowsforumz.com interface, at author's request
>   > > > Articles individually checked for
> conformance to usenet
>  > > standards
>   > > > Topic URL:
> http://www.windowsforumz.com/Group-Policy-Control-Windows-Services-grou-ftopict344950.html
>   > > > Visit Topic URL to contact author (reg.
> req'd). Report abuse:
> http://www.windowsforumz.com/eform.php?p=1082258
>   > > >
> >
> > Hi,
> >
> > Glad to help. The service is usually not disabled unless you
> disabled
> > it. Also with XPSP2, it automatically turns it on again.
> >
> > Glad you figured it out.
> >
> > Cheers,
> > Lara
> >

Hi,

The Network Service is an account like the SYSTEM account. Just add it
to the permissions on root of the drive and make sure it has at least
Read. If you are having synch errors it may need more. I have it
having write access.

If you don’t have it there, then WUS cannot see the drive when
synching.

Cheers,
Lara