Windows Security - Non-Domain Automatic Updates

NOTE:  The WUAU.adm file on a W2K or XP computer is outdated and cannot be used.  The current versions can be found here: http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=D26A0AEA-D274-42E6-8025-8C667B4C94E9

How to load policy settings using the Local Group Policy Object:

  1. You will need the WUAU.adm file that describes the new policy settings for Automatic Updates. WUAU.adm is automatically installed into the %windir%\inf directory when you install Automatic Updates.
  2. You can load %windir%\inf\wuau.adm as an administrative template in the Group Policy Object Editor:
  3. Click Start, and then click Run.
  4. Type GPEDIT.msc to load the Group Policy snap-in.
  5. Under Computer Configuration, right-click Administrative Templates.
  6. Click Add/Remove Templates, and then click Add.
  7. Enter the name of the Automatic Updates ADM file: %windir%\inf\WUAU.adm
  8. Click Open, and then click Close to load the wuau.adm file.

How to configure the Automatic Update Policy settings using the Local Group Policy Object:

  1. In Group Policy, navigate to the following location:
  •   Computer Configuration
  •   Administrative Tools
  •   Windows Components
  •   Windows Update   
  1. Set up for: "Configure Automatic Updates" 
  •   Select Check Box "Enable"
  •   Under "Configure Automatic updating:"  Select:  "4  Auto download" and schedule the install"
  •   Under "Scheduled Install Day:" Select "0  Every Day"
  •   Under "Scheduled Install Time:" Select "03:00"
  •   Select "OK"
  1. Set up for: "Specify Intranet Microsoft Update Service location"
  •   Select Check Box "Enable"
  •   Under "Set the intranet update service for detecting updates:"  Enter "http://pmpbox"
  •   Under "Set the intranet statistics server:"  Enter "http://pmpbox"
  •   Select "OK"
  1. Set up for:  "Reschedule Automatic Updates Scheduled installations"
  •   Select Check Box "Enable"
  •   Under "Wait after system startup (minutes):"  Enter "3"
  •   Select "OK"
  1. Set up for:  "No Auto-restart for scheduled Automatic Updates Installations"
  •   Select Check Box "Enable"
  •   Select "OK"
  1. Close Group Policy
  2. Reboot Computer