[wpkg-users] Using wpkg to set windows update to use wsus

[John Danks]

On Mon, Aug 22, 2011 at 10:22 AM, Donny Brooks <dbrooks at mdah.state.ms.us> wrote:
> On 8/22/2011 12:16 PM, John Danks wrote:
>>
>> I use a package definition that overwrites the entire local group
>> policy. If you want to have different local group policies on
>> different machines then you have to make multiple versions of this. I
>> only have the regular policy and a mobile policy, so it works out well
>> enough for me.
>>
>> <package
>>        id="group_policy"
>>        name="Default Windows Local Group Policy"
>>        revision="8"
>>        priority="50"
>>        execute="always">
>>
>>        <check
>>                type="file"
>>                condition="exists"
>>                path="C:\WINDOWS\system32\GroupPolicy\gpt.ini" />
>>
>>        <install cmd='%COMSPEC% /C rmdir /S /Q
>> C:\WINDOWS\system32\GroupPolicy'>
>>                <exit code="2" />
>>        </install>
>>        <install cmd='%COMSPEC% /C mkdir C:\WINDOWS\system32\GroupPolicy'
>> />
>>        <install cmd='%COMSPEC% /C xcopy /E /H
>> %SOFTWARE%\apps\group_policy\default C:\WINDOWS\system32\GroupPolicy\'
>> />
>>        <install cmd='%COMSPEC% /C gpupdate' />
>>
>>        <upgrade cmd='%COMSPEC% /C rmdir /S /Q
>> C:\WINDOWS\system32\GroupPolicy'>
>>                <exit code="2" />
>>        </upgrade>
>>        <upgrade cmd='%COMSPEC% /C mkdir C:\WINDOWS\system32\GroupPolicy'
>> />
>>        <upgrade cmd='%COMSPEC% /C xcopy /E /H
>> %SOFTWARE%\apps\group_policy\default C:\WINDOWS\system32\GroupPolicy\'
>> />
>>        <upgrade cmd='%COMSPEC% /C gpupdate' />
>>
>>        <remove cmd='%COMSPEC% /C rmdir /S /Q
>> C:\WINDOWS\system32\GroupPolicy'>
>>                <exit code="2" />
>>        </remove>
>> </package>
>>
>>
>> On Mon, Aug 22, 2011 at 9:38 AM, Donny Brooks<dbrooks at mdah.state.ms.us>
>>  wrote:
>>>
>>> Does anyone have the settings they use to push out the settings to make
>>> windows use their internal WSUS server? Normally when we setup a new pc
>>> we
>>> go in to gpedit.msc and manually configure them. However I have found the
>>> registry settings that I can force. The problem is the settings are not
>>> reflected by gpedit.msc when I import the registry settings. Is this
>>> normal?
>>> If so I know how I can send out the registry changes with wpkg. Does
>>> anyone
>>> else do this currently?
>>>
>>> Donny B.
>>> -------------------------------------------------------------------------
>>> wpkg-users mailing list archives>>
>>> http://lists.wpkg.org/pipermail/wpkg-users/
>>> _______________________________________________
>>> wpkg-users mailing list
>>> wpkg-users at lists.wpkg.org
>>> http://lists.wpkg.org/mailman/listinfo/wpkg-users
>>>
> Would you care to share how you built the
> %SOFTWARE%\apps\group_policy\default file? or could you send an example.
> That is what I have been unable to find a good example of to this point.
> Basically all we push are the WSUS settings but there is so much more we
> would like to push. Not being on an Active Directory domain has it's
> drawbacks but if this works maybe we can work around some of them!
>
> Donny B.
>

Set up the local GP how you want it on a PC with gpedit.msc and then
copy the contents of C:\WINDOWS\system32\GroupPolicy over to your
%SOFTWARE% area.