Ncomputing Woes

[Jaymes Driver]

Well I have been in contact with NComputing, I have not received much from them, unfortunately. I think my best bet is to start troubleshooting myself.

I believe the issue to be with the secondary accounts still having the “ability” to look for updates despite the fact I have disabled the options from the GPO. I am going to begin by removing the GPO restrictions and getting the machine back to where the main user account (also administrative account) so that I can apply updates again.

I have been in contact with DeepFreeze. They have confirmed that it is not a fault of deepfreeze. There are files that have rights to be changed for security purposes and they have recommended I use a batch file method of installing Windows Updates to the machines during a thaw period that I have specified.

I have already began tackling the process of allowing the Novell user that is required to log in via the command line and a batch file. This has been successful in mounting drives to the computer without authentication and I can install drivers, I assume this should suffice with logging into the computer as well.

However I have NEVER updated windows from the command line and I am looking for some resources or assistance in locating the commands I need to send to the computer in order for it to begin looking for and downloading updates.

Ultimately we have a WSUS server and I would like to use that but I would first like to get the machines logging in and attempting to update before supplying my WSUS server, because this is the least of my worries.

[Steve Ropiak]

Check this link for command line options on wuauclt.exe. Never did a commn line check for updates, but I’m sure there is a way.
[url]http://technet.microsoft.com/en-us/library/cc720477(v=ws.10).aspx[/url]

[Jaymes Driver]

Yeah same here, never done it, but I KNOW there are ways to do it, just trying to get my ducks in a row so I can try

Thanks for the suggestion I will see what I can come up with!

[Tom Elliott]

wuauclt /detectnow
wuauclt /resetauthorization
wuauclt /reportnow

[Tom Elliott]

These are the easiest of the commands, you can get way more complex.

[Jaymes Driver]

How would I tell it my WSUS server with a command and update from there? Are you familiar with that of the top of your head

I will set up some batch files on my test machine to see how things go tonight.

I appreciate your help!

[Tom Elliott]

You wouldn’t need to.

Through group policy, you tell it where to look for updates. When you wuauclt it automatically looks on the wsus server.

[Jaymes Driver]

Awesome sounds good, sounds like I need to add something else to my image before next year. I will let you know how it goes!

[Jaymes Driver]

for reference mainly for myself, I like to use my threads a information archives.

reg file to update WSUS information
[CODE][HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
“AcceptTrustedPublisherCerts”=dword:00000001
“ElevateNonAdmins”=dword:00000001
“TargetGroup”=“Workstations”
“TargetGroupEnabled”=dword:00000000
“WUServer”=“http://your-WSUS-server:port”
“WUStatusServer”=“http://your-WSUS-server:port”

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“AUOptions”=dword:00000004
“AUPowerManagement”=dword:00000001
“AutoInstallMinorUpdates”=dword:00000001
“DetectionFrequency”=dword:0000000a
“DetectionFrequencyEnabled”=dword:00000001
“IncludeRecommendedUpdates”=dword:00000001
“NoAUAsDefaultShutdownOption”=dword:00000001
“NoAUShutdownOption”=dword:00000001
“NoAutoRebootWithLoggedOnUsers”=dword:00000001
“NoAutoUpdate”=dword:00000000
“RebootRelaunchTimeout”=dword:0000000a
“RebootRelaunchTimeoutEnabled”=dword:00000001
“RescheduleWaitTime”=dword:0000000a
“RescheduleWaitTimeEnabled”=dword:00000001
“ScheduledInstallDay”=dword:00000000
“ScheduledInstallTime”=dword:00000003
“UseWUServer”=dword:00000001[/CODE]

[Tom Elliott]

I do the same thing.