I have to search for this everytime I’m asked to make a setting so here’s how I do it.
To turn on Windows Update for domain users.
Start – Run – type “mmc” – ok -> This opens Microsoft Management Console.
File – Add/Remove Snap-in.
In the “Available Snap-ins” list select “Group Policy Management Editor and click “Add.”
Select “Browse” – from the “Select Group Policy Object”
Highlight “Domain Controllers.domainName.com” and click “OK” and “OK” and “OK” once more to get to the Console Root
Click the plus signs next to “Default Domain Controllers Policy,” “Computer Configuration,” “Policies,” “Administration Templates: Policy definitions,” and “Windows Components.” Go to the bottom of that list to find “Windows Update.” In the the window to the right you’ll find all the settings that can be enabled to make client PCs update automatically. Not all are beneficial and a few are very annoying so to avoid making your users mad… Double click on a setting and go to the “Explain” tab to read the consequences of enabling or disabling a setting. If you don’t know what you’re about to do, leave it “Not Configured.”
