How to Bypass VISTA Windows Update managed by Domain Administrator

[amrog]

I have recently joined my company domain. The domain administrator has set the group policy to make windows update managed by system administrator by default.

How to make the default windows update being through online update rather than the domain update?

 

[linney]

Is this a company policy type of decision that you may have no control over while you are a member of the Domain?

What concerns you most about the current group policy and have you spoken with the System Administrator about any such concerns?

 

[amrog]

Yes, this is the company policy since they do not need any updates that may turn their clients unstable and overload them with user supports.

For me, I do not need their support, but only need to access inbox and use proxy and other services while am in the company. I do not need to be restricted by domain group policies.

 

[linney]

I imagine that they will have to place your machine or your User in a special Group or OU so that the Policy is not applied to your user. I don't think it is something you can do yourself, other than removing the machine from the Domain.

Why don't you check out the Server Forums too.

http://www.tek-tips.com/threadminder.cfm?pid=931

http://www.google.com/search?hl=en&rls=com.microsoft:*&q="group+policy"+exempt&btnG=Search

 

[mrdenny]

Correct this is not something that you can do yourself. Your admin will need to do this for you. This will probably be something which the admin doesn't want to do. If the machine will be on the domain it's a potential attack vector into the network, and as such the admin will probably require that for the PC to be on the network it has all security updates applied.

I know that I require this of all PCs at our office.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[strongm]

>I know that I require this of all PCs at our office.

As do I in ours.

 

[amrog]

My vista gave me the option either to update online or through the admin controlled update. Both are working, but the default is that of the domain.

Can I change the default?

 

[linney]

I don't know the answer to your last question, I just wanted to correct that earlier link of mine so that you can see what is available there.

http://www.google.com/search?hl=en&rls=com.microsoft:&q="group+policy"+exempt&btnG=Search

 

[mrdenny]

That would also be controller by the admin via the GPO. The updates will be the same on both the domain and Windows update. The reason that the domain option exists is so that Admins can approve updates before releasing them to the user base to ensure that update doesn't break internal applications. The second reason is to reduce bandwidth requirements. The server downloads all the updates and feeds them out to the workstations and servers as needed so the downloads are only downloaded once not hundreds or thousands of times.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog