Question : Pushing down local group policy changes with scripts

Hi all, I have recently started using Active Directory w/ Group Policy and am slowly migrating all my users from Netware 5.1 to MSAD. At the same time, I have started using a WSUS server for updates. My AD Group Policy pushes the WSUS info down to the AD clients just as it's supposed to. Hence here is my question...

I have many machines that are not on AD yet that I wish to be able to take advantage of WSUS. I can go into LOCAL group policy and set the WSUS info and the workstation starts using it without problem. Being most workstations are still logging into Netware, I would like a script to send the WSUS info to the local GP at login. Making a script run at Netware's login in no problem, but knowing HOW to script IS the issue. What tools can/should I use to create something that will modify the workstation's GP and add these WSUS entries without overwriting their existing Group Policies?

Answer : Pushing down local group policy changes with scripts

I would recommend that you use a reg file to make the changes and use a logon script to apply the reg file e.g.:

regedit /s my_reg_file.reg

See below for a sample reg file.

To create your own reg file, configure a machine how you want it then export the following registry key:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate]

Cheers,

J

                       
         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:

           
           
             [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate]
"WUServer"="http://server.domain.com"
"WUStatusServer"="http://server.domain.com"
"ElevateNonAdmins"=dword:00000000
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="2-Prod"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"UseWUServer"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000000
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000004
"AutoInstallMinorUpdates"=dword:00000001
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:00000005
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000000a
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000007
"ScheduledInstallTime"=dword:00000004
           
         

Open in New Window

Select All