Announcement

Collapse
No announcement yet.

Temporarily "Block" application of GPO server-side

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Temporarily "Block" application of GPO server-side

    Does anybody have a good way to pause the application of GPOs on a server?

    This need to be doable by someone with absolutely no rights over AD, just a local admin.

    Reason for this is I manage some services through GPO (Forced automatic + some ACLs) and the person installing the patches must be able to ensure that if he stops them, they won't start again until he's done with the patching..

    Thanks for your ideas.
    Last edited by gepeto; 15th July 2008, 20:29. Reason: Meant client side not server
    VCP on vSphere (4), MCITP:EA/DBA, MCTS:Blahblah

  • #2
    Re: Temporarily "Block" application of GPO server-side

    I would imagine that if he's able to stop the services they will stay stopped unless he has to restart the server.
    Technology is only as good as those who use it

    My tech blog - wiredtek.wordpress.com

    Comment


    • #3
      Re: Temporarily "Block" application of GPO server-side

      I can't spare hours testing right now but when I stop a service set to automatic, then I run gpupdate, the service gets restarted.

      I believe I will create a "Maintenance" GPO that sets services to manual, and implement a process where they have to request this to be applied before doing maintenance.
      VCP on vSphere (4), MCITP:EA/DBA, MCTS:Blahblah

      Comment

      Working...
      X