WSUS - computers groups synchronization and updates view

Hi Technet,
I'm in front of stupid question I think but this is turning me mad.
   1) In my WSUS, I'm creating sub-groups in order to separate new Products and Classifications updates and to apply them to my test computers pool.
Unfortunately, as you can see on my screenshot, these groups are empty.
I've checked the GPO created for these tests and everything is settled as for our other WSUS GPO, which are well synchronized to our server.
Here is the screenshot of GPO settings :
Here is what I've tried :
* Delete the computers group, recreated it and wait for 90 to 120 minutes for the DC to synchronize ---> Not OK.
* Force the sync with gpupdate /force on WSUS server ---> Not OK.
* Delete GPO and recreate them ---> Not OK.
What is strange is that it's not the first time I'm using side targeting and all other Computers Groups I have are well working.
Based on my first screenshot, my problem is on sub-groups under GVA_Test_Computers.
Is there anything I can try to have them get computers ?
2) For custom view I can create, (for example, I've created Office 2010 in the first screenshot) is it possible to keep them alive or do I have to recreate them everytime I'm connecting to the WSUS console ?
Many thanks.
TiGrOu.

I'm not entirely sure that I'm understanding, but, it sounds like you are battling with multiple GPOs, each GPO is trying to set the same client-side-targeting registry key to a different value.
If so, the "precedence" (link order) of the GPOs must be clearly understood.
If a computer is applying multiple GPOs, and, if each GPO is setting the same registry key (but to a different value), the GPO with the lowest precedence will "win".
This is not cumulative (the values do not append), the values are replaced each time a GPO is applied by the registry CSE.
So, if you have a computer that is a member of several AD security groups, and each security group is the control for a GPO, only the lowest precedence GPO will be resultant. (effectively, the last GPO to execute/apply, will be the resultant winner).
If you wish for this computer to have *all* of the client-side-targeting groups applied, you must construct a new security group and GPO, this will reflect the "merged" multiple-groups settings you desire.
e.g. create and link a GPO named "WSUS_Group1Group2Group3" which sets the values to be "Group1; Group2; Group3" and create an AD group for that security filter. Ensure that this GPO is Precedence=1. Add the computer to this AD group.
(1 is lowest, even though, visually, 1 is at the top of the list ;)
http://blogs.msdn.com/b/muaddib/archive/2012/08/22/determine-gpo-precedence-with-gpmc-gpresult.aspx
http://technet.microsoft.com/en-us/library/hh147307(v=ws.10).aspx
(the terms "lowest" and "highest", in this MS concept, relate to the value of the number, not the visual positioning within GPMC)
Or, have I misunderstood?
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Similar Messages

  • Using time machine, multiple computers back- up and update

    hi all,
    to start off, i'm planning to buy a new iMac in the Q1 2009... the comming update, and i'm wondering:
    whit time machine, is it possible to let's say back up my macbook.
    and whit the new iMac update from the backup so my iMac is in sync whit the macbook?
    and when i add, change or kill a file, time machine update's this in the backup, and my macbook will notice this and update the macbook of the backup the iMac changed?
    hard question, hope somebody out there can help me by answering or refering me,
    cause i realy want this to be true, gheghe!
    Kind regards,
    Lennart.
    Message was edited by: Lennart Hendriksma

    Lennart Hendriksma wrote:
    hi all,
    to start off, i'm planning to buy a new iMac in the Q1 2009... the comming update, and i'm wondering:
    whit time machine, is it possible to let's say back up my macbook.
    and whit the new iMac update from the backup so my iMac is in sync whit the macbook?
    you can use use Migration Assistant to migrate your settings and data from the TM backup of the macbook to the new imac. you'll also have an option to do it during the initial computer setup.
    This is a one time operation. You can not use Time Machine to keep computers synced after that. each computer has its own TM backup and they don't interact with each other.
    and when i add, change or kill a file, time machine update's this in the backup, and my macbook will notice this and update the macbook of the backup the iMac changed?
    sorry, I don't understand what you are asking. please rephrase.
    hard question, hope somebody out there can help me by answering or refering me,
    cause i realy want this to be true, gheghe!
    Kind regards,
    Lennart.
    Message was edited by: Lennart Hendriksma

  • JTable: how to "synchronize" (and update) with an array ?

    Hello.
    I am new to the Swing and I have been googling to find a solution for my problem, but I've spent too much time and found nothing. Please give me some advice.
    So: I have an array of data and a JTable. The array is constantly being changed and I would like to update the JTable with every change in the array.
    Thank you so much for yr help.

    So here I am with an as-simple-as-possible example of my problem.
    Just run it, everything is in this class.
    And you'll have a table with 10 rows with 0 in every row. Every 2 seconds one line should change, but it doesn't, only if you resize the frame, or click in a cell the numbers in the cells will change.
    Q: how to change it without resizing or clicking into the table ?
    package MainFrame;
    import java.awt.BorderLayout;
    import javax.swing.JTable;
    import javax.swing.WindowConstants;
    import javax.swing.SwingUtilities;
    import javax.swing.table.AbstractTableModel;
    class NewJFrame extends javax.swing.JFrame {
         private static JTable jTable;
         public static void main(String[] args) throws Exception {
              SwingUtilities.invokeAndWait(new Runnable() {
                   public void run() {
                        NewJFrame inst = new NewJFrame();
                        inst.setLocationRelativeTo(null);
                        inst.setVisible(true);
              Generator gen = new Generator(jTable);
         public NewJFrame() {
              super();
              initGUI();
         private void initGUI() {
              try {
                   setDefaultCloseOperation(WindowConstants.DISPOSE_ON_CLOSE);
                   jTable = new JTable(new MyTableModel());
                   getContentPane().add(jTable, BorderLayout.CENTER);
                   pack();
                   this.setSize(399, 263);
              } catch (Exception e) {
                   e.printStackTrace();
    class Generator extends Thread {
         private int[] array = new int[10];
         JTable table;
         public Generator(JTable table) {
              array = new int[10];
              this.table = table;
              this.start();
         public void run() {
              super.run();
              for (int i = 0; i < 10; i++) {
                   array[i] = i + 200;
                   table.getModel().setValueAt(i, i, 0);
                   try {
                        Thread.sleep(2000);
                   } catch (InterruptedException e) {
    class MyTableModel extends AbstractTableModel {
         private int[] array = new int[10];
         public int getColumnCount() {
              return 1;
         public int getRowCount() {
              return array.length;
         public Object getValueAt(int arg0, int arg1) {
              return array[arg0];
         public void setValueAt(Object value, int rowIndex, int columnIndex) {
              array[rowIndex] = ((Integer) value).intValue();
    }Thank you so so much my man.

  • Possible? two users/computers to share and update the same calendar?

    We would like to have two people update the same calendar. How is this possible? Subscribers can't update?
    Thanks

    In short it isn't possible (currently). Subscribers cannot edit a calendar they subscribe to - it is read-only.
    See this thread for more detail: http://discussions.apple.com/thread.jspa?threadID=705054&tstart=45

  • How do I have catalog on an external drive and update tags from multiple computers?

    I have catalog on an external drive but the tags are on the computer. Is there any way that tags can be placed on the external drive so that other computers can access and update?

    In case its just the tags that you want to have in one catalog that is easy.From multiple computers save the tags to the xml file.Copy the xml file to the external drive where the catalog resides.From there you can import the tags into the catalog.
    Command for exporting tags ->Save tags to file in the tags panel of the application
    Command for importing tags->From file

  • Decline and update using SCCM 2012

    On WSUS you can search and update and then decline not required updates.
    There is a way to Decline updates using the Software Update Rol on SCCM 2012?
    I need to hide some unnecesary updates from the SCCM-SoftwareUpdate view, and I can't do it by using the filtering options that comes with this view.
    Any ideas?
    Thank you for your help.

    No. There is explicit way to decline an update and no real reason to either. If you need to, you can create a sub-folder under the All Update node and move the un-wanted updates there.
    Jason | http://blog.configmgrftw.com

  • Wsus query needed - get WSUS-Computers, belonging WSUS-Group and Not Installed Count

    Hi,
    i try to find a way by using basic WSUS powershell cmds in combination with piping in Server 2012 R2 to get all registered computers in WSUS plus belonging WSUS-Group and Update "Not Installed Count" as output.
    Is that possible?
    I tried multiple times and enden up in using posh - is there no way based on standard powershell commandlets.
    Thank you
    Peter

    Hi Michael,
    it seems that you are right :(. I tried out a few things with powershell (source
    http://blogs.technet.com/b/heyscriptingguy/archive/2012/01/19/use-powershell-to-find-missing-updates-on-wsus-client-computers.aspx) - big problem is that i actually cant get belonging WSUS Group to Server object. I only are able to get all WSUS Groups
    but cant find the right sytax to get only belonging ones.
    Any ideas?
    Thanks
    Peter
    #Load assemblies
    [void][system.reflection.assembly]::LoadWithPartialName('Microsoft.UpdateServices.Administration')
    #Create Scope objects
    $computerscope = New-Object Microsoft.UpdateServices.Administration.ComputerTargetScope
    $updatescope = New-Object Microsoft.UpdateServices.Administration.UpdateScope
    #Gather only servers
    $ServersId = @($wsus.GetComputerTargets($computerscope) | Where {
    $_.OSDescription -like "*Server*"
    } | Select -expand Id)
    #Get Update Summary
    $wsus.GetSummariesPerComputerTarget($updatescope,$computerscope) | Where {
    #Filter out non servers
    $ServersId -Contains $_.ComputerTargetID
    } | ForEach {
    New-Object PSObject -Property @{
    ComputerTarget = ($wsus.GetComputerTarget([guid]$_.ComputerTargetId)).FullDomainName
    ComputerTargetGroupIDs = ($wsus.GetComputerTarget([guid]$_.ComputerTargetId)).ComputerTargetGroupIds
    ComputerTargetGroupNames = ($wsus.GetComputerTargetGroups())
    NeededCount = ($_.DownloadedCount + $_.NotInstalledCount)
    #DownloadedCount = $_.DownloadedCount
    NotInstalledCount = $_.NotInstalledCount
    #InstalledCount = $_.InstalledCount

  • Clearing historical WSUS approvals for computers groups

    Hi there,
    I have inherited a messy WSUS environment that I have to use until 2015.
    We patch in quarterly cycles Jan/Apr/Jul/Oct and split out systems out into Computer Computer Group then sub-group Dev/Prod/QA.
    I have updates that have been missed over the past year that I'd like to get installed on the handful of servers that missed it in previous quarter patching
    for whatever reason. However, when I approve the update, it also installs on any needed server in previously approved Computer Groups.
    I have approved an update for BI Production Servers and BI QA Servers earlier in the year. I now wish to approve the same update to BI Test Servers. In
    the mean time, an additional server has been added to BI Production Servers that does not have this update, but as being production I do not wish to install it, just yet.
    I approve the update for BI Test Servers. The GPO sets patches to install on Sundays at 0300. This time comes
    around and both the server in BI Test Servers and BI Prod Servers have received the update.
    My assumption, as mentioned earlier, is that because BI Productions Servers had had approval for this update at an earlier time, it applied to the server in this group and installed automatically.
    I had thought deleting any old Update Views would have mitigated this, but I guess they are just views.
    What I would like to do, is to clear all previous approvals in WSUS, so the system thinks no updates have never been approved. Is such a thing possible?We're
    running the system on SQL so a query that can amend this would also be an option.
    The system is also running a downstream server, so any changes would need to propogate downwards. Unsure if SQL would cope with this.
    Sorry for such a long post!
    Any help gratefully received!
    Lewis

    What I would like to do, is to clear all previous approvals in WSUS, so the system thinks no updates have never been approved. Is such a thing possible?
    Sure! Open the All Updates View. Ctrl-A. Right-Click. Select NotApproved for "All Computers" and inherit to all groups. If you're lucky, the UI won't timeout trying to complete the task.
    Kinda radical, though, if you ask me.
    It might be more productive to back up a step and make sure that you fully understand the association between approvals, groups, and members, and what behaviors will occur as a result, and simply set the approvals the way they should be, and remove the approvals
    from updates that shouldn't be.
    In the mean time, an additional server has been added to BI Production Servers that does not have this update, but as being production I do not wish to install it, just yet.
    If you put a machine in a group that has approved updates, that machine is going to get ALL of the approved updates that are not yet installed -- particularly if it is *configured* to do that. Part of the challenge here seems to be confusing the concept
    of *Approval* (permission/authorization) with the actual *Deployment* (action) of the updates. A second part of the challenge here is that your servers should not be able to *automatically* install updates if you wish to expressly control when they do that.
    My assumption, as mentioned earlier, is that because BI Productions Servers had had approval for this update at an earlier time, it applied to the server in this group and installed automatically.
    This is absolutely correct.
    I had thought deleting any old Update Views would have mitigated this, but I guess they are just views.
    Also correct. Views are views -- just a collection of updates with common attributes.
    Approvals are approvals.
    The system is also running a downstream server, so any changes would need to propogate downwards.
    Important point! All changes WILL propgate downwards, but removing the approvals from hundreds (if not thousands) of updates will functionally break the downstream server. This forum is replete with conversations about people who have declined hundreds of
    updates in one pass. The server-to-server synchronization task is just not equipped for that volume of event transactions.
    If you truly feel the need to remove all of the approvals, it would likely take less time to build a new downstream server and sync after the approvals have been removed.
    For that matter, it would likely take less time to rebuild the UPSTREAM server, than to try to remove every approval in the system!
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • Error when adding columns to table and update sync group schema

    Hi,
    I have an Azure SQL Database that is synced to five lokal SQL Server Express 2012 clients. Today I had to add some columns to the tables, I did this using SMMS and ALTER TABLE on the hub-database.
    Then I disabled auto-sync in the Azure Portal and updated the sync schema.
    The first error I got when clicking on Save-Button was that my goup is not ready for syncing. I assumed that was caused by two sync agents who were offline. So I deleted them from the group and the error was gone. (is this an generall issue that all agents
    must be online to update the schema?)
    But then I got the next error when clicking on Save-Button who tells me SQL Error 207, invalid column name on the new columns I've added. 
    Here's the error in the eventlog:
    id:DbProvider_SqlSyncScopeProvisioning_Error, rId:, sId:cc009538-29a6-4980-8db6-98fe520626b6, agentId:cb734c59-3484-41ed-8002-dec8cf7e21b4,
    agentInstanceId:1aa5a36e-0dfb-4ff1-841a-c298d2e77fe7, syncGroupId:9d439cdd-de14-4e4d-a799-8a7fa518f533, syncGroupMemberId:dd2d6cdf-fdb3-4ff8-8ab5-8e639c35af47, hubDbId:d5c5615a-6f55-484a-8c76-cf335989fa41, tracingId:b5f0eb23-1ade-437b-af33-a1960ebd1c23, databaseId:a9c5ba71-a7b0-4ffe-ab8d-10b6006fc282,
    sqlAzureActivityId:00000000-0000-0000-0000-000000000000, e:'Type=System.Data.SqlClient.SqlException,Message=Ungültiger Spaltenname &apos;Kunde_Name&apos;.
    Ungültiger Spaltenname &apos;Rechnung_gestellt&apos;.
    Ungültiger Spaltenname &apos;Rechnung_bezahlt&apos;.
    Ungültiger Spaltenname &apos;Kunde_Name&apos;.
    Ungültiger Spaltenname &apos;Rechnung_gestellt&apos;.
    Ungültiger Spaltenname &apos;Rechnung_bezahlt&apos;.,Source=.Net SqlClient Data Provider,StackTrace=
      bei System.Data.SqlClient.SqlConnection.OnError(SqlException exception&#44; Boolean breakConnection&#44; Action`1 wrapCloseInAction)
       bei System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception&#44; Boolean
    breakConnection&#44; Action`1 wrapCloseInAction)
       bei System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj&#44;
    Boolean callerHasConnectionLock&#44; Boolean asyncClose)
       bei System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior&#44; SqlCommand cmdHandler&#44;
    SqlDataReader dataStream&#44; BulkCopySimpleResultSet bulkCopyHandler&#44; TdsParserStateObject stateObj&#44; Boolean&amp; dataReady)
       bei System.Data.SqlClient.SqlCommand.RunExecuteNonQueryTds(String methodName&#44; Boolean
    async&#44; Int32 timeout&#44; Boolean asyncWrite)
       bei System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion&#44;
    String methodName&#44; Boolean sendToPipe&#44; Int32 timeout&#44; Boolean asyncWrite)
       bei System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
       bei Microsoft.Synchronization.Data.SqlServer.SqlSyncTrackingTableHelper.UpdateTrackingTableWhereColumnsNotNullInBaseTable(SqlConnection
    connection&#44; SqlTransaction transaction&#44; DbSyncColumnDescription[] addedColumns&#44; DbSyncColumnDescription[] modifiedColumns&#44; Int32 tableObjectId&#44; SqlSyncMarkerTableHelper markerHelper)
       bei Microsoft.Synchronization.Data.SqlServer.SqlSyncTableProvisioning.ReApply(SqlTransaction
    trans&#44; SqlSyncProviderAdapterConfiguration oldConfiguration)
       bei Microsoft.Synchronization.Data.SqlServer.SqlSyncScopeProvisioning.ReApplyScope(SqlConnection
    connection)
       bei Microsoft.Synchronization.Data.SqlServer.SqlSyncScopeProvisioning.ReApplyInternal(SqlConnection
    connection)
       bei Microsoft.Synchronization.Data.SqlServer.SqlSyncScopeProvisioning.ReApply(),', eType:'Type=System.Data.SqlClient.SqlException',
    eMessage:'Message=Ungültiger Spaltenname &apos;Kunde_Name&apos;.
    Ungültiger Spaltenname &apos;Rechnung_gestellt&apos;.
    Ungültiger Spaltenname &apos;Rechnung_bezahlt&apos;.
    Ungültiger Spaltenname &apos;Kunde_Name&apos;.
    Ungültiger Spaltenname &apos;Rechnung_gestellt&apos;.
    Ungültiger Spaltenname &apos;Rechnung_bezahlt&apos;.' Error Code: -2146232060 - SqlError Number:207,
    Message: Ungültiger Spaltenname &apos;Kunde_Name&apos;.. SqlError Number:207, Message: Ungültiger Spaltenname &apos;Rechnung_gestellt&apos;.. SqlError Number:207, Message: Ungültiger Spaltenname &apos;Rechnung_bezahlt&apos;.. SqlError
    Number:207, Message: Ungültiger Spaltenname &apos;Kunde_Name&apos;.. SqlError Number:207, Message: Ungültiger Spaltenname &apos;Rechnung_gestellt&apos;.. SqlError Number:207, Message: Ungültiger Spaltenname &apos;Rechnung_bezahlt&apos;..
    , eTypeInner:, eMessageInner:
    Can anyone help here?
    Kind
    regards,
    selmiac

    Hello,
    When you alter the table on hub database, did you specify the new column allow NULLs or have a DEFAULT? The column must allow NULLs or have a DEFAULT for the user to create it in the other tables on the sync group.
    Reference:Add or remove a column in a sync group
    If the issue persists, you may try to delete the sync group and recreate the group.
    Regards,
    Fanny Liu
    Fanny Liu
    TechNet Community Support

  • Obtain drivers from MS-Server and updates from WSUS

    Hi,
    is there a possibility to obtain drivers from the MS Server and the "other" updates from the WSUS-Server?
    We have workstations with Win7 and XP and pluged in devices (USB) should obtain the drivers (if available) automatically from MS-Server.
    Obtaining drivers through WSUS is not an option.
    The Group Policy "Computer Configuration\...\Windows Update" is set to obtain updates from "intranet Microsoft update service location".
    Should there be no possibility to distinguish between driver and update obtaining locations,
    then is it possible to set WSUS as primary obtaining location and as secondary the MS-Serve? 
    Greets, 
    Emmanuel

    Like I mentioned before I tried to use this:
    http://technet.microsoft.com/en-us/library/cc753091.aspx
    1. Try:
    Step1:
    I uninstalled the device and deleted the driver of my testing device. (local)
    Step2:
    I have created a new GP on Server 2003R2x86 (AD/DC) and linked it in the OU where my test-PC is located.
    .../ComputerConfiguration/Administrative Templates/System/InternetCommunicationManagement/Internet Communication Settings/TurnOffWindowsUpdateDeviceDriverSearching-->disabled
    Step3:
    I restarted the test PC with a logonscript: "gpupdate /force"
    Result:
    It didn't work.
    2.Try:
    Same procedure, but instead of creating the policy on the '03 Server, I created the policy with RSAT for W7.
    Result:
    It didn't work.
    Now I have a new question:
    Isn't the above mentioned policy for this?:
    http://windows.microsoft.com/en-us/windows7/automatically-get-recommended-drivers-and-updates-for-your-hardware
    I ask, because this is exactly the setting that has to be changed so that everything works the way I want.
    (at least for the Win7 PCs. I don't care much about the XP-PCs because they will be replaced in the near future)
    Well one option is to change this setting manually on every PC, but this would be a huge PITA.
    Can this be done in a policy or with a script (registry?)?

  • WSUS Hangs on "Unused updates and update revisions"

    In our environment we have not cleaned up WSUS updates in a while, probably about a year. I have been tasked with cleaning it up and optimizing it. When I attempt to run the WSUS Server Cleanup Wizard, it hangs on "Unused updates and update revisions"
    and doesn't do anything. The wizard then disappears and I am taken back to the WSUS Console where I see the following:
    Error: Database Error
    When I click copy error to clipboard, this is what is copied:
    The WSUS administration console was unable to connect to the WSUS Server Database.
    Verify that SQL server is running on the WSUS Server. If the problem persists, try restarting SQL.
    System.Data.SqlClient.SqlException -- Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.
    Source
    .Net SqlClient Data Provider
    Stack Trace:
    at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
    at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
    at Microsoft.UpdateServices.UI.SnapIn.Wizards.ServerCleanup.ServerCleanupWizard.OnCleanupComplete(Object sender, PerformCleanupCompletedEventArgs e)
    In my research, I have found several solutions, and have tried a few of my own. Below I will list the ones I have tried: 
    1. Run each item individually. IE, run superseded updates, then run expired updates after that finishes, then run unneeded update files after that finishes, etc. This did not work
    2. Stop the WSUS IIS service and run "wsusutil.exe removeunneededupdates" this also did not work
    The solutions I have found, but am hesitant to try (due to the fact that we are in a live production environment) are the following:
    1. Re-Index the WSUS Database according to the following link: 
    https://technet.microsoft.com/en-us/library/dd939795(v=ws.10).aspx
    2. Deleting the files in the WSUS folder and running "wsusutil.exe reset" from the following link: 
    http://windowsitpro.com/windows/quick-tip-resetting-wsus-server
    I would like to know what, if any, impact either of these solutions will have on our environment, and which one would be the preferred method. I feel like I should use the first one, and if I still don't have any luck then try the second. My only concern
    with the second method is that it might break something (not sure what, except updates). 
    A little about our environment - 8,000 computers, WSUS and SCCM are on the same Server 2008 R2 server, we only have the one WSUS and SCCM server, so nothing downstream as far as WSUS is concerned. 
    Thanks everyone!

    UPDATE:
    I have started going through and declining updates, and then going through SCCM and removing any expired updates from the SCCM side as well. I am now down to 3822 unapproved updates in WSUS, with a total of 13304 updates.
    At this point I am STILL UNABLE to run the cleanup wizard to clean up any of these. It still hangs when it runs, and only on Unused Updates and update revisions. I have even tried running powershell scripts and command line utilities to clean WSUS up, and
    still just hangs. I am pretty much at a loss, so any other advice would be appreciated.
    One more question, should it resort to this: What impact does resetting WSUS have on a live environment, with 7000 plus computers? Should I have to resort to it, is this something that is going to cause any major issues? 
    We do plan on preventing this in the future by running the database defrag once a month, and running the WSUS Server Cleanup Wizard once per quarter, but getting there sure is proving to be quite the challenge.
    Thanks again!

  • How can I deploy EFS using Group Policy and automatically encrypt computers for ALL users who login?

    How can I deploy EFS using Group Policy and Active Directory with a goal to automatically encrypt computers for ALL users who login? (NOT an option for me to use BitLocker)
    I was asked to deploy EFS to encrypt the user my documents folder and profile on all of the users laptops. The laptops are in common areas (board meeting rooms, etc) and security of files is a must.
    I successfully created a recovery certificate in AD. I created an OU and setup an EFS policy and users can now login and select to encrypt their own files. The issue is that management would like to have automaticy Encrypt ALL users my documents AUTOMATICALLY
    when a user login.
    Can this be done?
    Please help

    Hi,
    Any update?
    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • Grouping customers and view customer open items list - Group wise

    Hi.
    I have some requirement from my client.
    He says that he want to view customer open items list group wise.
    In FBL5N we can give the selection of multiple customers. But he wants to group the specific customers and then view the open items for this group.
    For example: Client has 10 customers and out of these customers he wants to select and group 5 customers. And then he want to view open items list for this group.
    Can anyone help me how to group these specific customers in the total customers list. Also request you to provide me the option to view open items for this group of customers.
    Regards,
    Padmavathi

    Hi Padmavathi,
    It is possible. use Worklist for Customers.
    Go to OB55 and define a Worklist for Customers, and mention the list of Customers that you want to see under that Worklist.
    After this, when you to to FBL5N, you will get an option to select Worklist to run the list of open items.. and it would show open items of all customers that you have defined in your worklist.
    Also note that you will have to go to FB00, tab Line Items, and tick Worklists available. This is at User Level, so only that user will be able to see the worklist in his FBL5N transaction code.
    Regards,
    SAPFICO
    Edited by: SAPFICO on Feb 10, 2011 11:43 AM

  • How to maintain several views of the same data and update a tree

    I have an object UiUser, which is displayed in my application in several different views. There are three different views which all have the User object i.e. search results, user tree and user table. Each of the views has the same menu items, so the user can be deleted from any of the views.
    What I am trying to work out is how should I ensure the item is updated in all of the views?
    I can fire a property change event with the UiUser and update two of the views i.e. search results and user table, but how do I update the tree?
    I thought of overiding the equals/hashcode methods of the UserTreeNode to compare uiUser.getId () and I could then search the tree and find the tree node of the required UiUser. But I have reservations about this whole approach as it just seems wrong.
    Any ideas of how to keep N views in sync, I really don't want all of the views to have tree nodes as this equally seems wrong. This should be a simple problem to solve and I'm sure lots of people have done it, I'm just not sure which is the best approach to take.
    Thanks

    Hi Jan,
    This is so because each installer has a GUID that is used to check whether the application needs to be upgraded or not. (It's a Microsoft function).
    What you can do is create a new installer with a different GUID (copy the installer in the projects), and check witha  text editor whether this GUID has changed.
    But any specific reason you need two seperate installs? You can run the application twice with a specific INI token:
    allowmultipleinstances=True
    Ton
    Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
    Nederlandse LabVIEW user groep www.lvug.nl
    My LabVIEW Ideas
    LabVIEW, programming like it should be!

  • Add fields to maintenance view and update then using events

    Hi experts:
      I've created a table with 4 fields, one of them is userid. Also, there is a maintenance view to add new entries.
      I want to display user name when typing userid using events (1 or 21). I know how to do it if username is one of the fields of the table, but there is a requirement to not store username in the table, just userid.
    My question is: is possible to add a field into the maintenance view and update it using events but not store the value in DB?.
    Thanks in advance for your help.
    Regards,
    Carlos.

    In the save event just clear the entries of the field(user name) in the internal table.

Maybe you are looking for

  • .pdf files appear as a gray screen

    .pdf files appear as a gray screen when downloading from a website link since upgrading to Snow Leopard. They (pdf files) are fine when received and opened from an email sent to us.  Any ideas on how to fix it? 

  • ITunes won't open after 7.6 update

    I don't remember when software update ran, but since then I can't open iTunes on my Mac (Powerbook G4, OS 10.4.11). It bounces once in the dock and that's it. Same thing if I run it from the apps folder. I've tried a few things already: 1) Run diskwa

  • So I want to connect my Ipod to wifi at home....

    The problem is, we don't have wifi in our home. So, I'm working on getting a router... except I'm not sure exactly what I need, like cables and another modem and all that. So I was wondering if anyone knows what I need to get in order to correctly se

  • Merge when no data found

    Hello All , Ran into a problem using MERGE statement . Looks like the USING clause in merge statement has to return data for the merge to work. My issue is that when the using select is not returning any data the merge does not perform the WHEN NOT M

  • How can I delete one of my apple id

    My husband has a Apple Mac I have a I pad 2 and a I phone 4. When I go into the App Store to sign in the I pad and phone want me to sight in as his apple I'd Please help thank you Fishponds