WSUS - 2000 Server and XP clients not communicating

[SprayCan]

Hey everyone, I hope someone can help with this.

I've recently upgraded our company SUS server to WSUS. The network is 2000-based, with 2000 professional on all clients.

As part of a test to roll-out XP across the network, I installed it on my personal machine. Since that point, I've found that my machine will not pickup the Group Policy settings for WSUS.

The XP client receives all other GP settings, except for the WSUS settings. Results from rsop.msc revealed the following message:

"Group Policy Infrastructure failed due to the error listed below.
Access is denied.

Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available."

I currently suspect there is some kind of XP setting that is preventing the GP from writing information to the XP registry, but I would welcome any alternative views on this.

Has anyone experienced this before? I'm at a loss as to where to go next. If any more information is required please ask, and I will provide you with it.

Thanks

 

[Tekmazter]

Download the WSUS Client diagnostics tool to see where the communication is breaking down. You can find it at the bottom of the page here:

http://www.microsoft.com/windowsserversystem/updateservices/support/default.mspx

Additionally, there is a server diagnostic tool on there too

 

[SprayCan]

The program revealed the following for me:

AU does not have policy set:
UseWuServer is disabled....FAIL.

Now, does that indicate that there is a switch, or something similar to allow me to use the WSUS group policy settings on my computer?

All I'm seeing is that there is no GP for WSUS applied to this computer. I already know that. What I want to know is why!

 

[SprayCan]

Anyone else got some ideas?

 

[SprayCan]

Anyone at all?

 

[SprayCan]

Don't panic everyone I've figured it out. For those of you who may come across this thread in the future with a similar problem to me, I discovered that the 'Authenticated Users' security group did not have permission to access the SYSVOL volume on my WSUS server.

My current theory is that XP machines enter themselves under Authenticated Users by default, whereas 2k machines are simply 'Users'. Havn't tried to prove the theory right or wrong, but the idea makes sense.