We currently have no issues deploying windows updates to machines, and all our GPO's look to be set properly.
The issue seems to be when using Secunia and creating a SUG to deploy the software it will not work. Through GPO we have this setting enabled: [cid:image001.png@01CFA65A.F9C812E0] When you go to the physical machine and open Local GP Editor we see this (after the restarts and gpupdates): [cid:image002.png@01CFA65A.F9C812E0] Only after we change the "Allow signed updates..." to Enabled then things start to work. When we do a GPResults on the machine it shows that it is getting the GPO which is supposed to Enable this. Has anyone seen this? Am I missing something? Thanks, Kevin Johnston