Pushing Updates
- When pushing Microsoft security/critical updates to both windows 2000/XP clients computer, Is there a way I can do the following:
Only pushed these Microsoft security/critical updates to both windows 2000/XP client’s computer between the time of 4:30 pm to 11:30 pm and after 11:30 pm don’t push any more updates?
Also is there a way where I can set something not to restart the computer, even thou some of the updates required a restart? Because sometime it asks the users that your computer will restart when they are in middle of their work.
Thanks
Deep Kumar- Changed TypeYog Li - MSFTMSFT, ModeratorFriday, July 31, 2009 10:38 AMThis is a question.
Answers
Hello Deep,
Actually, SCE server doesn't push any update to the agents. If the updates have been approved, the client will detect the needed updates and install them on its own initiative. So there's not an option on SCE server about "push time". However, you can configure the Automatic Updates on the agents and set a proper time to download and install the updates.
The computer will always restart after installation of a restart-required update. It is by design. However, you can enable the "No auto-restart for scheduled automatic update installation options Group Policy" to avoid restart without any prompt.In order to do that follow these steps.
1. In the Start Menu go to Run type “gpedit.msc” and press Enter
2. Now a Group Policy editor will open. In this window navigate to: Computer Configuration -> Administrative Template -> Windows Components -> Windows Update
3. Double click on No auto-restart for scheduled Automatic Updates installations
4. In the settings window Choose Enabled and click OK
5. Close Group Policy Editor
When the policy is DISABLED, the system will always restart without notice, 5 minutes after completion of installation (or at whatever alternate delay time has been configured by policy).When the policy is ENABLED, the user will be prompted to initiate the restart and the restart will not initiate until the user clicks on the "Restart Now" button.
Hope it helps,
Yog Li - MSFT- Marked As Answer byYog Li - MSFTMSFT, ModeratorFriday, July 31, 2009 10:39 AM
All Replies
Hello Deep,
Actually, SCE server doesn't push any update to the agents. If the updates have been approved, the client will detect the needed updates and install them on its own initiative. So there's not an option on SCE server about "push time". However, you can configure the Automatic Updates on the agents and set a proper time to download and install the updates.
The computer will always restart after installation of a restart-required update. It is by design. However, you can enable the "No auto-restart for scheduled automatic update installation options Group Policy" to avoid restart without any prompt.In order to do that follow these steps.
1. In the Start Menu go to Run type “gpedit.msc” and press Enter
2. Now a Group Policy editor will open. In this window navigate to: Computer Configuration -> Administrative Template -> Windows Components -> Windows Update
3. Double click on No auto-restart for scheduled Automatic Updates installations
4. In the settings window Choose Enabled and click OK
5. Close Group Policy Editor
When the policy is DISABLED, the system will always restart without notice, 5 minutes after completion of installation (or at whatever alternate delay time has been configured by policy).When the policy is ENABLED, the user will be prompted to initiate the restart and the restart will not initiate until the user clicks on the "Restart Now" button.
Hope it helps,
Yog Li - MSFT- Marked As Answer byYog Li - MSFTMSFT, ModeratorFriday, July 31, 2009 10:39 AM
For the first question I meant can I set the time frame for example 9am to 2pm only when clients will receive automatically approved updates?
Thanks for the GP's tip and it worked.
Cheers
Deep Kumar- Hello Deep,
With my experience, this request is not supported by the SCE Server 2007.
Thanks,
Yog Li - MSFT - Thanks.
Deep Kumar - I have enabled this setting, and the policy is applied, but users still get a 5 min countdown without the ability to postpone. I read somewhere that this occurs if you set a deadline on an update.
We should have the ability to do a completely silent install (admin or not) and choose when clients will restart.
This is not an acceptable "feature". - Hi,
The installation schedule of an approved update depends on whether you set an installation deadline for the update and on the Automatic Updates settings:
- If you set a deadline, the update is automatically installed during the next check-in from the client computer. And if the deadline has expired, the WUA will not give the user the "Restart Now" option, because the deadline is of the utmost priority than any user preference.
- If you did not set a deadline, the installation time depends on how Automatic Updates is configured on the computer:
- If Automatic Updates is configured to automatically download and install at a certain time, the update installs automatically at that time unless the user manually installs it before that time.
- If Automatic Updates is configured for automatic download and manual install, the user can install the update at anytime.
If you cannot accept "restart automatically" at anytime, you should not set a deadline on any update.
Thanks,
Yog Li - MSFT That clears it up a little better. Thanks.
