Allow signed update from intranet Microsoft Update service

[chicagotech]

We are configuring SCCM 2007 and SCUP 2011 on Windows 2008 R2 to install Adobe update. We would like enable “Allow signed update from an intranet Microsoft Update service location” on all clients without going to each workstation. so we enable “Allow signed update from an intranet Microsoft Update service location” on the Default Domain Polic.

If I run gpresult /r, it shows the default domain policy applies to the computer, but the local computer policy shows “Allow signed update from an intranet Microsoft Update service location” No configured.

I have checked both Windows XP and 7. All of them have the same issue. I have run gpupdate /force and reboot the computers. How do you troubleshooting this issue?

[chicagotech]

Actually, I don’t see any problem in this scenario. Please note that only “specify intranet Microsoft Update service location” policy is deployed via local group policy. For the setting “Allow signed update from an intranet Microsoft Update service location”, it needs to be configured via domain GPO. Hence that’s the expected behavior when you monitor from running “gpresult /v” and local group policy console.

[chicagotech]

I suggest you would have seek help in concerning Group policy forum: http://social.technet.microsoft.com/For ... GP/threads

Anyways please check this guide once and configure settings accordingly & check for the difference http://technet.microsoft.com/en-us/libr ... 33(v=ws.10).aspx

[chicagotech]

Have you configured such setting in local computer policy? Once you deploy your domain group policy that includes automatic update settings, this will override the same settings if they were specified in the local policy. But this doesn't mean that the automatic update settings in local policy would be changed to the same value as specified in domain group policy (not as security settings), it would just be overriden when applying if it has been specified. So if you haven't configured such setting in local computer policy, it would remain "Not configured".