Home
.. About WSUS Wiki

WSUS
.. WSUS FAQ
.. WSUS on SBS
.. WSUS Troubleshooting
.. WSUS News Groups
.. Known WSUS Issues
.. WSUS Links
.. WSUS Wish List

WSUS Documents
.. WSUS Deployment Guide
.. WSUS Installation Guide
.. WSUS Release Notes
.. WSUS Best Practice

SUS
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues

Troubleshooting Group Policy settings for Automatic Updates using Software Update Services (SUS)

This article explains Troubleshooting Group Policy for Automatic Updates using Software Update Services, SUS.

First, the basics:

1. The policy settings for SUS are applicable to computers only. They will have no effect if they are in a GPO that is not targetted at users.

2. Make sure you have a good & healthy DNS. By that it means, your HOST RECORD (A) should exist in your local DNS Server. Run NSLOOKUP to see if the DNS is responding properly.

3. Also, you should be able to resolve YOUR-SUSSERVER-NETBIOSNAME from the workstation. Do PING -a YOUR-SUSSERVER-IP ADDRESS

4. There are some free tools available from Microsoft which will help troubleshooting issues with Group Policy..

I will explain them in detail.

2. GPRESULT: Gpresult.exe: Group Policy Results

This command-line tool displays information about the result Group Policy has had on the current computer and logged-on user.

Download: http://download.microsoft.com/download/win2000platform/gpresult/1.0/NT5/EN-US/gpresult.exe

GPResult provides the following general information:

Operating System

Type (Professional, Server, Domain Controller).

Build number and Service Pack details.

Whether Terminal Services is installed and, if so, the mode it is using.

User Information

User name and location in Active Directory (if applicable).

Domain name and type (Windows 2000 or Windows NT).

Site name.

Whether the user has a local or roaming profile and location of the profile.

Security group membership.

Security privileges.

Computer Information

Computer name and location in Active Directory (if applicable).

Domain name and type (Windows 2000 or Windows NT).

Site name.

GPResult also provides the following information about Group Policy:

The last time policy was applied and the domain controller that applied policy, for the user and computer.

The complete list of applied Group Policy objects and their details, including a summary of the extensions that each Group Policy object contains.

Registry settings that were applied and their details.

Folders that are re-directed and their details.

Software management information detailing assigned and published applications.

Disk quota information.

IP Security settings.

Scripts.

3. Gpotool: Gpotool.exe is an advanced Group Policy troubleshooting tool that's included in the Windows Server 2003 and Windows 2000 Server resource kits.

You can find information about the Windows 2003 version of Gpotool in the resource kit and at

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpotool-o.asp

Download GPO Tool:

http://tinyurl.com/3vnow

Gpotool performs the following tasks:

• checks the consistency of Group Policy Objects (GPOs) between theSysvol- and Active Directory (AD)-based portions of GPOs
• Checks GPO replication
• Searches GPOs
• Targets specific domain controllers (DCs) to allow testing of specific DC Group Policy status
• Displays GPO information
• Checks cross-domain GPOs

4. FAZAM 2000, Reduced-Functionality Version:

This third-party GUI tool extends the Group Policy management functionality of Windows 2000.

Download: http://download.microsoft.com/download/win2000platform/fazam/1.00.0.1/nt5/en-us/fazam_setup.exe

This reduced-function version of the tool offers the following features:

Central user interface for managing Group Policy objects (GPOs) that provides a hierarchical view of policies associated with organizational units (OUs) and domains.

Resultant Set of Policies (RSoP) feature that enables the display of applicable policies for software installation, registry settings, folder redirection, and scripts.

Simulation of scenarios in which a computer or a user moves from one OU to another and analysis of the RSoPs.

Diagnostics that show the histories of applied GPOs.

Search feature for GPOs based on the globally unique identifier (GUID) and GPO name.

Backup of GPO settings.

Restoration of GPO settings for a single domain.

Partial reporting of registry settings.

This version of FAZAM 2000 is designed for small enterprises, Windows 2000 deployment test labs, and single domains with fewer than 500 users or computers.

Technical Resources for IT Pros: -

Fourteen-part Webcast Series on Group Policy:

This series of Webcasts give you the chance to understand Group Policy in detail through the use of presentations, virtual sessions, and live demos.

Where to find the non-Microsoft tools and products that work with and extend Group Policy:

• http://www.GPTF.org

Microsoft "landing" pages for Group Policy:

Group Policy Support pages:

• http://GroupPolicy.editme.com
• http://www.GPAnswers.com
• http://www.GPOGuy.com

Links to White Papers and KB articles of interest:

White Paper: Troubleshooting Group Policy in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;810739

1. Group policies are not applied the way you expect; "Event ID 1058" and "Event ID 1030" errors in the application log:
   http://support.microsoft.com/default.aspx?scid=kb;en-us;314494
2. Client computers record Event ID 1030 and Event ID 1058 when DFS is not started on a Windows 2000-based domain controller:
   http://support.microsoft.com/default.aspx?scid=kb;en-us;834649
3. Group Policy processing does not work and events 1030 and 1058 are logged in the application log of a domain controller:
   http://support.microsoft.com/default.aspx?scid=kb;en-us;842804
4. Troubleshooting Group Policy application problems:
   http://support.microsoft.com/default.aspx?scid=kb;en-us;250842
5. Group Policy Is Not Applied and You Receive No Error Message:
   http://support.microsoft.com/default.aspx?scid=kb;en-us;310741
6. Important issue with XP SP2 .adm files
   http://support.microsoft.com/default.aspx?kbid=842933