One of the most important things in every Windows based domains are updates. You`ll probably want to conform updating via Domain Group Policy since people often forget/postpone Windows Updates.

This LAB assumes y'all already have domain configuration in place.

Hither is how to practice information technology on Windows Server 2012 R2:

On your domain controller open up search (or run) and type in gpmc.msc | Click on gpmc

gp_windowsupdate_1

!!!! Lilliputian side note–  In this example, I don`t desire aforementioned Windows Update policy for my servers and clients. It would be inappropriate for product servers to update and restart let'due south say at Monday 13 hours. But information technology would be very good time for clients since everybody is at lunch at that time.

Anyhow, it is good practice to create different Organizational Units for different types of computers and users in your environment so you tin can fine tune your group policy and permissions too.

You lot tin can create new organisation unit of measurement in Active Directory Users and Computers | right click on domain name | New – Organizational Unit

Let's go on with the LAB

Aggrandize wood |Domains | correct click on your OU (organizational unit) that you want this policy to use (in my example TestPCs OU) | Create a GPO in this domain, and Link it hither

gp_windowsupdate_2

We need to name New GPO. I`ll proper noun mine Windows_Update | Exit None under Source Starter GPO | OK

gp_windowsupdate_3

New Policy is created (in my instance) under TestPCs OU and it volition apply to all PCs that are part of TestPCs OU.

Select created Windows_Update GPO (group policy object) and click on Settings tab on the right part of the screen

gp_windowsupdate_4

Correct click on Computer Configuration |Edit

gp_windowsupdate_5

Click on Computer Configuration | Policies | Administrative Templates | Windows Components | Windows Update

gp_windowsupdate_6

Double click on Configure Automatic Updates |Enabled | under Options define how you would like your updates to work. I cull following

Configure automated updating: four – Auto download and schedule the install

Schedule install twenty-four hour period:  2 – Every Monday at 13:00h

Use |OK

gp_windowsupdate_7

In order to confirm that this setting is working nosotros need to test on one of the PCs that are afflicted by this policy.

Log on onto the PC – command prompt with administrative privileges (run equally administrator)

              gpupdate /force

gp_windowsupdate_8

After that if we check under Control Console | Windows Update | Change settings (right function of the screen) we see that update settings are changed

gp_windowsupdate_9

Other Windows Updates options worth mentioning:

Plow on recommended updates via Automatic Updates

With this enabled you`ll go optional updates for windows components.

gp_windowsupdate_10

No automobile-restart with logged on users for scheduled automatic updates installations is also skillful choice.

Conclusion

We did some Grouping Policy and enabled automatic Windows Update for our domain PCs.

Disclaimer