[wpkg-users] Using wpkg to set windows update to use wsus

Donny Brooks dbrooks at mdah.state.ms.us
Mon Aug 22 19:22:09 CEST 2011


On 8/22/2011 12:16 PM, John Danks wrote:
> I use a package definition that overwrites the entire local group
> policy. If you want to have different local group policies on
> different machines then you have to make multiple versions of this. I
> only have the regular policy and a mobile policy, so it works out well
> enough for me.
>
> <package
> 	id="group_policy"
> 	name="Default Windows Local Group Policy"
> 	revision="8"
> 	priority="50"
> 	execute="always">
> 	
> 	<check
> 		type="file"
> 		condition="exists"
> 		path="C:\WINDOWS\system32\GroupPolicy\gpt.ini" />
> 	
> 	<install cmd='%COMSPEC% /C rmdir /S /Q C:\WINDOWS\system32\GroupPolicy'>
> 		<exit code="2" />
> 	</install>
> 	<install cmd='%COMSPEC% /C mkdir C:\WINDOWS\system32\GroupPolicy' />
> 	<install cmd='%COMSPEC% /C xcopy /E /H
> %SOFTWARE%\apps\group_policy\default C:\WINDOWS\system32\GroupPolicy\'
> />
> 	<install cmd='%COMSPEC% /C gpupdate' />
>
> 	<upgrade cmd='%COMSPEC% /C rmdir /S /Q C:\WINDOWS\system32\GroupPolicy'>
> 		<exit code="2" />
> 	</upgrade>
> 	<upgrade cmd='%COMSPEC% /C mkdir C:\WINDOWS\system32\GroupPolicy' />
> 	<upgrade cmd='%COMSPEC% /C xcopy /E /H
> %SOFTWARE%\apps\group_policy\default C:\WINDOWS\system32\GroupPolicy\'
> />
> 	<upgrade cmd='%COMSPEC% /C gpupdate' />
> 	
> 	<remove cmd='%COMSPEC% /C rmdir /S /Q C:\WINDOWS\system32\GroupPolicy'>
> 		<exit code="2" />
> 	</remove>
> </package>
>
>
> On Mon, Aug 22, 2011 at 9:38 AM, Donny Brooks<dbrooks at mdah.state.ms.us>  wrote:
>> Does anyone have the settings they use to push out the settings to make
>> windows use their internal WSUS server? Normally when we setup a new pc we
>> go in to gpedit.msc and manually configure them. However I have found the
>> registry settings that I can force. The problem is the settings are not
>> reflected by gpedit.msc when I import the registry settings. Is this normal?
>> If so I know how I can send out the registry changes with wpkg. Does anyone
>> else do this currently?
>>
>> Donny B.
>> -------------------------------------------------------------------------
>> wpkg-users mailing list archives>>
>> http://lists.wpkg.org/pipermail/wpkg-users/
>> _______________________________________________
>> wpkg-users mailing list
>> wpkg-users at lists.wpkg.org
>> http://lists.wpkg.org/mailman/listinfo/wpkg-users
>>
Would you care to share how you built the 
%SOFTWARE%\apps\group_policy\default file? or could you send an example. 
That is what I have been unable to find a good example of to this point. 
Basically all we push are the WSUS settings but there is so much more we 
would like to push. Not being on an Active Directory domain has it's 
drawbacks but if this works maybe we can work around some of them!

Donny B.



More information about the wpkg-users mailing list