I have a Domain policy on a Windows 2003 server that requires all computers to automatically download and install Windows updates, which at times automatically reboots the machines. I have a Windows 2000 server and an XP machine that I need to not automatically reboot because they are running bar code collection devices that are vital to our operation. How do I override the domain policy for these two machines so that this does not happen?
The best way is create two GPOs with different policies. Then, additionally put the different computers into different security groups. Then, link the GPOs high-up in the structure; say, the domain or at a high OU level. Finally, remove Authenticated Users and add in just the names of the security groups that contain the computers you want affected.
Additional Expert Help: Be sure to check our Answer FAQ for more expert advice. For faster answers, visit ITKnowledge...