Few questions about W2K3

Hy all,

I am young administrator (1 year of expereance), and I have some questions, so if someone can help me, please post you'r answers, thanks!

1. How can I turn on auditing on all computer on my subnet? I wanna set up to every XP in my network make local log when someone delete anything from C:\ or D:\. I know to set this manualy, (c:\, security policy, advanced, auditing, put group "everyone", choose advanced options, set up "delete".), but how to set up on entire network?

2. In GP\Computer configuration\Windows settings there is a "System Services". Great. How I can set advanced options for every service? In my example, I wanna to have messanger service automaticly turned on when I join computer in the domain.

There is only three options: automaticly, manual, disabled. OK, I have choosed "automaticly", but this doesn't start service, it just change "startup type" to automaticly, nothing more (service is still stoped).

3. Yesterday I have updated all computers with WSUS. The only problem was that every computer get notification message in center of screen "your computer has been updated and need restart". Press "restart now" or "restart later". But problem is that button "x" and "restart later" was grey and my users can't click this button, so they clicked "restart now" : ) Some power users have first closed all open application's or move notification window.

What to set up that users don't see this message or that they can click on "restart later" button?

Here is my WSUS configuration (GP):

Do not display "Install updates and shut down" -> enabled

Do not adjust default option to "Install updates" -> enabled

Configure automatic updates -> enabled, 4 - Auto download and schedule the install, every day, 16:00

Specify intranet MS update service -> enabled, my WSUS server (http:\\dc3)

Enable client-side targeting -> enabled, "racunala" racunala=computers in my language : )

Reschedule automatic updates scheduled -> Not Configured

No auto-restart for... -> enabled

automatic updates detection frequency -> enabled, 12h

Allow automatic updates immediate installation -> enabled

(question about this: why this option doesn't work? For me, it is OK to all computer install updates soon as they download them from WSUS server). Offcourse, uptades will work after restart. In my network, this option is enabled, but all computers start to install updates at schedulet time (16:00).

Delay Restart for scheduled installations -> enabled, 30 minutes

Re-Prompt for restart wiht... -> enabled, 180 minutes

Allow non-admin to receive update notif... -> Disabled.

Thanks for help and sorry for my english.

Edited April 19, 200719 yr by Veky.VG