Ncomputing Woes
-
Well I have been in contact with NComputing, I have not received much from them, unfortunately. I think my best bet is to start troubleshooting myself.
I believe the issue to be with the secondary accounts still having the “ability” to look for updates despite the fact I have disabled the options from the GPO. I am going to begin by removing the GPO restrictions and getting the machine back to where the main user account (also administrative account) so that I can apply updates again.
I have been in contact with DeepFreeze. They have confirmed that it is not a fault of deepfreeze. There are files that have rights to be changed for security purposes and they have recommended I use a batch file method of installing Windows Updates to the machines during a thaw period that I have specified.
I have already began tackling the process of allowing the Novell user that is required to log in via the command line and a batch file. This has been successful in mounting drives to the computer without authentication and I can install drivers, I assume this should suffice with logging into the computer as well.
However I have NEVER updated windows from the command line and I am looking for some resources or assistance in locating the commands I need to send to the computer in order for it to begin looking for and downloading updates.
Ultimately we have a WSUS server and I would like to use that but I would first like to get the machines logging in and attempting to update before supplying my WSUS server, because this is the least of my worries.
-
Check this link for command line options on wuauclt.exe. Never did a commn line check for updates, but I’m sure there is a way.
[url]http://technet.microsoft.com/en-us/library/cc720477(v=ws.10).aspx[/url] -
Yeah same here, never done it, but I KNOW there are ways to do it, just trying to get my ducks in a row so I can try
Thanks for the suggestion I will see what I can come up with!
-
wuauclt /detectnow
wuauclt /resetauthorization
wuauclt /reportnow -
These are the easiest of the commands, you can get way more complex.
-
How would I tell it my WSUS server with a command and update from there? Are you familiar with that of the top of your head
I will set up some batch files on my test machine to see how things go tonight.
I appreciate your help!
-
You wouldn’t need to.
Through group policy, you tell it where to look for updates. When you wuauclt it automatically looks on the wsus server.
-
Awesome sounds good, sounds like I need to add something else to my image before next year. I will let you know how it goes!
-
for reference mainly for myself, I like to use my threads a information archives.
reg file to update WSUS information
[CODE][HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
“AcceptTrustedPublisherCerts”=dword:00000001
“ElevateNonAdmins”=dword:00000001
“TargetGroup”=“Workstations”
“TargetGroupEnabled”=dword:00000000
“WUServer”=“http://your-WSUS-server:port”
“WUStatusServer”=“http://your-WSUS-server:port”[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“AUOptions”=dword:00000004
“AUPowerManagement”=dword:00000001
“AutoInstallMinorUpdates”=dword:00000001
“DetectionFrequency”=dword:0000000a
“DetectionFrequencyEnabled”=dword:00000001
“IncludeRecommendedUpdates”=dword:00000001
“NoAUAsDefaultShutdownOption”=dword:00000001
“NoAUShutdownOption”=dword:00000001
“NoAutoRebootWithLoggedOnUsers”=dword:00000001
“NoAutoUpdate”=dword:00000000
“RebootRelaunchTimeout”=dword:0000000a
“RebootRelaunchTimeoutEnabled”=dword:00000001
“RescheduleWaitTime”=dword:0000000a
“RescheduleWaitTimeEnabled”=dword:00000001
“ScheduledInstallDay”=dword:00000000
“ScheduledInstallTime”=dword:00000003
“UseWUServer”=dword:00000001[/CODE] -
I do the same thing.
