Microsoft SUS block for SP2 not working

[blackdog]

I have implemented Microsoft's "temporary disable deploying SP2 via SUS and AU" by the book.

However, SP2 is still being deployed to my test group. I have implemented the block via group policy using the adm template supplied.

The registry entries are exactly how MS say they should be - DoNotAllowXPSP2

has a value of 1

Anyone got this to work?

http://www.microsoft.com/technet/prodtechn...p2aumngfaq.mspx

[BeenThereB4]

For SUS, don't "Approve" the update (Service Pack 2) in the SUS management screen. The registry entry will block Windows Update and Automatic Updates. Then you're good to go!

[blackdog]

Thanks BeenThereB4

I've just realised there is a gotcha. Microsoft allow blocking SP2 from "Automatic Updates" and "Windows Updates". But "SUS" is not considered to be either "AU" or "WU".

I was hoping to manage the deployment of SP2 via SUS using the temporary block to block all AD OU's then open selected OU's for SP2.

Ah well, best laid plans etc,.