Active Directory

[Raz316]

With trying the SUS program mentioned by Directhex in my thread below, I started having a look around Active Directory and Group Policies.

It appears to be way more simple than I expected! Anyway, before I enforce a load of rules, I'm wondering, is it possible to SU on the client machines as admin per chance I need to try and fix something (that wouldn't be possible with the machine locked)?

Ta, once again!

[Jiff Lemon]

Can you clarify what your trying to achieve?
You generally create the GPO (group policy object) and apply to it the OU.

The updates, depending on how you choose to deploy them, will roll out in the background - Users don't log onto the SUS server to pull them down a la windowsupdate.

If you wanted to test your settings, create an OU, move a couple of test machines into the OU and apply the GPO to it.

[Raz316]

Thanks for the reply but I am ok now

The general idea was to disable features including Start > Run. But temporarily enable them using an admin password, but it is not important right.

Thanks again!