• If the endpoint is not joined to the NAU domain, manual configuration is required.
• The domain to which clients are joined is only relevant if the update server configured (or reconfigured) automatically.
• Specific domain membership and/or client authentication is not required to run the Windows Update service post configuration.

• Run “gpedit.msc”
• Follow on-screen prompts:
  • Local Computer Policy
    • Computer Configuration
    • Administrative Templates
    • Windows Components
    • Windows Update
• Set the intranet update service for detecting updates to: https://mesquite.ucc.nau.edu.

Windows Server Update Services (WSUS) is a component that provides a solution to manage and distribute critical Windows patches. These patches resolve known security vulnerabilities and stability issues with Microsoft Windows operating systems. This solution updates Windows 2000 and higher Windows operating systems.

Yes, we encourage turning off computers for conservation purposes.
If the user turns their computer off any time before 3:00am, then back on the next day, Automatic Updates will wait 1 minute after the logon prompt is displayed before proceeding with a scheduled installation. A reboot will occur if the user does not login. If the user does login, they will be notified to install the updates and to restart the computer to complete the installation.

If the computer is a member of the NAU domain, and the user checks the box to use the dial-in connection to the NAU VPN, the computer will have access to the group policies that instruct the Windows Update Component to look at our SUS server for updates.

Any computer that is a member of the NAU domain and running Windows 2000, Windows XP, or Windows Server 2003 will be notified through group policies to utilize our Software Update Service (SUS) server.

Yes. Servers are the only machines that can be excluded from the Software Update Service security mandate. Please send MENSA the name(s) of the servers that you would prefer to install updates manually. These servers will be placed into a special OU where the group policies for automatic and service pack updates will not be applied.

If your department has extenuating circumstances that prevents you from participating in the Automatic Updates Install process, your department head must contact Fred Estrella CITO, Information Technology Services to request this for your entire organizational unit.

ITS strongly recommends that Automatic Updates be installed on all computers in the NAU domain.

Microsoft releases Automatic Updates weekly. ITS will test the updates before approving them for the campus. Once the updates have the NAU approval status, ITS will release them on a weekly basis. This does not mean that you will receive an update every week; only as they become available for your workstation.

There is a group policy that will install the latest Windows Service Pack on Windows 2000 Professional, Windows 2000 Server and Advanced Server, Windows XP Professional, and Windows Server 2003 family.

If a Service Pack is needed on your machine, it will be installed upon computer startup. You will notice a message box stating “Installing Windows ?? Service Pack xx.” Do not reset your computer while this message box is displayed. The installation may take up to 20 minutes. Historically, Service Packs are released no more than twice a year.

Departmental liaisons will be notified when a new Windows Service Pack has been approved by ITS. A weeks’ notice will be given in preparation of the install.

ITS does recommend using VirusScan.

Most probably not. Only if your computer is a member of the NAU domain will it receive ITS approved Automatic Updates.