Hi guys, we have Windows Server 2003 SP2 running as one of our Domain Controllers. We implemented WSUS earlier this year and recently I came accross this article. http://blogs.technet.com/sus/archive/2008/06/30/wsus-how-to-throttle-bits.aspx The problem is that when I got into the GPO setup for WSUS, there is no Network > Background Intelligent Transfer Service section. Simply, Computer Configuration > Administrative Templates > Windows Components > Windows Update. Are there .adm files available so we can set the BITS throttling etc, or is there a hotfix that I need? All advice appreciated! Kind regards Shane.

Hi Spagman, Maybe you are going through wrong way......instead of Windows Components you go using the following steps; To set BITS bandwidth limitations Start the Group Policy Object Editor (click Start , click Run , and then type gpedit.msc ). Expand Computer Configuration , then Administrative Templates , then Network , then Background Intelligent Transfer Service . Open the Maximum network bandwidth that BITS uses (BITS 2.0) or Maximum network bandwidth for BITS background transfers (BITS 3.0) setting. Set the transfer rate in kilobits per second that you want BITS to use (the default is 10). Set the times at which you want to limit the bandwidth (the default is 8:00 A.M. to 5:00 P.M.). Set the limitations to be used outside of the designated time (the default is Use all available unused bandwidth , but you may select another limitation). Click OK . For more reference use: http://technet.microsoft.com/en-us/library/cc720428(WS.10).aspx Hope ir Helps []`sThiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org

Hi Thiago, thanks for that. But that doesn't appear to be editing the WSUS Group Policy that we have in place, only editing the local computer policy. When I edit the Windows SUS group policy object that's been created (linked to our user containers) through Group Policy Management, the Network, BITS configuration areas aren't there. For the local computer policy they are, but not any of the domain GPO's. Sorry, I hope I'm being clear! Cheers Shane.

SpagMan, You cannot see because this is a Computer Setting and not a User Setting. If you are using WSUS in your environment you should create a OU with the computers that you want to affect NOT USER. Ok, now we know that WSUS Policy and BITS policy needs to be linked to a container where we have COMPUTERs. I would suggest you create a NEW GPO and Follow those steps; Start the Group Policy Object Editor (click Start , click Run , and then type GPMC.msc ). Expand Computer Configuration , then Administrative Templates , then Network , then Background Intelligent Transfer Service . Remember that is not a User Setting. = ) Hope it HelpsThiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org

Thanks, if I create a new GPO the BITS options are in it, and i can make the settings i need. However, for some reason they do not appear in the existing WSUS GPO which is linked to our computers OU, not the users OU. Rgds, Shane.

I understand Spagman, What I`m saying is. BITS is a GPO to be linked to a OU that have Computer and NOT user. Ok....you have a OU with the computers right? In this OU you have a GPO linked right? ok. Just follow those steps above to configure BITS in the same GPO if you want or create a New GPO to the same OU that you have WSUS Policy. You told me before you was using a a GPO in Users Container that is not a good practice and also is not correct because WSUS and BITS settings is set to computers and not GPO. Here what you said: When I edit the Windows SUS group policy object that's been created (linked to our user containers) through Group Policy Management, the Network, BITS configuration areas aren't there. Ok....lets try: Create a New OU and Put the COMPUTERS that you want WSUS and BITS Policy affect inside this OU. Check this step by step right here: http://blogs.technet.com/sus/archive/2008/06/30/wsus-how-to-throttle-bits.aspx So, one more time....if you edit User Configuration you are not gonna see this policy. So, go to Computer Configuration, Administrative Templates, Network and the Background Intelligent Transfer Servic. If you want to use the same GPO that is WSUS set, just follow the same steps. []`sThiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org

Yeah I made a mistake, it's linked to our computers container user, sorry - that was my mistake there. I didn't set the GPO up so that's why I'm curious why the BITS options wouldn't be there. Perhaps the person that did it first created the OU linked to users or something. The WSUS GPO is linked to our computers containers and the security filtering is set to authenticated users. should the security filtering be set to computers instead of users as well?

Man, Dont change. I would recommend you to create a new OU with another name (WSUS for example) and put inside this OU the Computers that you want. and then create a new GPO with the settings that you want to. Its gonna be better to manage, and it will be more organized in Active Directory.Thiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org

Thanks for that. I will definitely create a new GPO then :) Does WSUS (through its management console) have to be configured to use a specific GPO? (so will I have to tell it to use the new one, not the old GPO)

Well, no necessarily but as I said its better to manage your GPOs. = ) If you want you can use the same GPO that you have linked to the Computer Container, but as you sair before I dont know if this GPO is correct. But anyway, you just need to right client in GPO and click to link to another existing OU. I really would recommend you start the GPO setting all over. You can find my guides over the internet. Hope it HelpsThiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org

Thanks, I will definitely do that. Create a new GPO and bring the old settings over, and also put in place the throttling settings. We paid a consultant to set WSUS up for us, i'm a bit disappointed that it was overlooked. Thanks again for your help Thiago, it's greatly appreciated Many thanks, Shane.

Great Spagman, Please in order to close this Thread, Mark the post as asnwered. Thanks a lot and when you need just come and open a new Thread. []`sThiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org