none
Server 2012/R2 Reboot nach Updates, in ADR aber richtig konfiguriert

    Question

  • Hallo zusammen,

    ich höre immer wieder Klagen von meinen Kollegen, dass sich bestimmte Server nach Installation der Updates selbstständig neu starten. Zuerst hatte ich Zweifel, weil in der ADR folgendes hinterlegt ist:

    "Systemneustart auf den folgenden Geräten unterdrücken:"

    x Server

    Im EventLog ist der Reboot aber dokumentiert:

    Protokollname: System
    Quelle:        User32
    Datum:         13.11.2017 09:12:28
    Ereignis-ID:   1074
    Aufgabenkategorie:Keine
    Ebene:         Informationen
    Schlüsselwörter:Klassisch
    Benutzer:      SYSTEM
    Computer:      xxxx01.xxxx.local
    Beschreibung:
    Vom Prozess "C:\Windows\system32\svchost.exe (xxxx01)" wurde auf Anforderung des Benutzers "NT-AUTORITÄT\SYSTEM" das Ereignis "Neustart" für den Computer "xxxx01" aus folgendem Grund initiiert: "Betriebssystem: Wiederherstellung (geplant)"
     Ursachencode: "0x80020002"
     Herunterfahrtyp: "Neustart"
     Kommentar: ""

    Die Updates werden auf unseren Servern nicht automatisch installiert. Es kommt aber vor, dass wir die Updates installieren und anschließend nicht sofort den Server booten wollen, sondern irgendwann später.

    Wenn ich mich dann z.B. einen Tag später wieder per RDP auf den Server verbinde, wird angezeigt, dass der Server in 15 Minuten neu gestartet wird, um Updates abzuschließen.

    Das wollten wir so aber nicht haben. Wenn kein User am Server angemeldet ist, wird folgendes angezeigt:

    "Windows Update - Der Computer wird in 2 Tagen neu gestartet, um die Installation wichtiger Updates abzuschließen."

    Das scheint nur ein Verhalten von Server 2012/R2 zu sein, bei Server 2008 habe ich diese Problematik nicht. Zu Server 2016 kann ich noch nicht viel sagen.

    Wie kann ich das Verhalten ändern, also dass niemals ein selbständiger Reboot ausgeführt wird. Im SCCM sehe ich keine anderen Einstellungen. Wie habe Ihr das gelöst?

    Vielen Dank schon mal, Stefan

    Monday, November 13, 2017 1:59 PM

Answers

All replies

  • RebootCoordinator.log.

    Torsten Meringer | http://www.mssccmfaq.de

    Monday, November 13, 2017 3:13 PM
    Answerer
  • hier die letzten Zeilen vor dem Reboot um 9.12 11-13-2017

    <![LOG[Entered ScheduleRebootImpl - requested from 'UpdatesDeploymentAgent'. set Rebootby = 0. set NotifyUI = True. set PreferredRebootWindowType = 4]LOG]!><time="00:39:31.166-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="4420" file="rebootcoordinator.cpp:663">
    <![LOG[An earlier reboot was already scheduled, only taken into account new parameters]LOG]!><time="00:39:31.166-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="4420" file="rebootcoordinator.cpp:793">
    <![LOG[Entered ScheduleRebootImpl - requested from 'UpdatesDeploymentAgent'. set Rebootby = 0. set NotifyUI = True. set PreferredRebootWindowType = 4]LOG]!><time="03:48:30.324-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="4764" file="rebootcoordinator.cpp:663">
    <![LOG[An earlier reboot was already scheduled, only taken into account new parameters]LOG]!><time="03:48:30.324-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="4764" file="rebootcoordinator.cpp:793">
    <![LOG[Reboot Coordinator received a SERVICEWINDOWEVENT END Event]LOG]!><time="05:00:00.051-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="4048" file="rebootcoordinator.cpp:3457">
    <![LOG[Entered ScheduleRebootImpl - requested from 'UpdatesDeploymentAgent'. set Rebootby = 0. set NotifyUI = True. set PreferredRebootWindowType = 4]LOG]!><time="05:22:28.141-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="3448" file="rebootcoordinator.cpp:663">
    <![LOG[An earlier reboot was already scheduled, only taken into account new parameters]LOG]!><time="05:22:28.141-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="3448" file="rebootcoordinator.cpp:793">
    <![LOG[Entered ScheduleRebootImpl - requested from 'UpdatesDeploymentAgent'. set Rebootby = 0. set NotifyUI = True. set PreferredRebootWindowType = 4]LOG]!><time="08:26:28.320-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="5860" file="rebootcoordinator.cpp:663">
    <![LOG[An earlier reboot was already scheduled, only taken into account new parameters]LOG]!><time="08:26:28.320-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="5860" file="rebootcoordinator.cpp:793">
    <![LOG[User logoff notification received]LOG]!><time="09:12:38.539-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="2152" file="rebootcoordinator.cpp:1498">
    <![LOG[Retry resuming bit-locker TPM PIN protector. Retry count 1]LOG]!><time="09:17:22.767-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="3652" file="internal.cpp:35">
    <![LOG[Didn't suspended bit-locker. Do nothing and return.]LOG]!><time="09:17:22.767-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="3652" file="rebootcoordinator.cpp:2731">
    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is getting pending reboot information...]LOG]!><time="10:46:13.441-60" date="11-13-2017" component="RebootCoordinator" context="" type="1" thread="860" file="rebootcoordinator.cpp:4055">

    Monday, November 13, 2017 4:47 PM
  • scheint wohl keiner das Problem sonst noch zu haben? Wundert mich. Oder weiß keiner die Lösung?

    Tuesday, November 28, 2017 1:13 PM
  • Das Log beinhaltet leider nichts hilfreiches. Sicher, dass ConfigMgr den Reboot initiiert hat? Steht was im Eventlog?

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, November 29, 2017 1:28 PM
    Answerer
  • alles was ich im EventLog dazu gefunden habe, steht in meinem ersten Posting. Ganz sicher bin ich mir nicht, aber ich kann mir nichts anderes vorstellen.
    Thursday, November 30, 2017 4:04 PM
  • Hallo nochmal,

    hab mir eben mal noch einen anderen Server unter die Lupe genommen, da steht ein etwas anderer Eintrag im EventLog, also hier ganz klar durch ccmexec:

    Der Prozess C:\Windows\CCM\CcmExec.exe (xxxx01) hat den/das Neustart von Computer xxxx01 für Benutzer NT-AUTORITÄT\SYSTEM aus folgendem Grund initialisiert: Kein Titel für den Grund

     Begründungscode: 0x80020001

     Herunterfahrtyp: Neustart

     Kommentar: Der Computer wird um 09/27/2017 05:12:39  neu gestartet, um die Installation von Anwendungen und Softwareupdates abzuschließen.

    Und hier noch das RebootCoordinator.Log zu der Zeit:

    <![LOG[Reboot Coordinator received a SERVICEWINDOWEVENT END Event]LOG]!><time="05:00:00.017-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="3776" file="rebootcoordinator.cpp:3457">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is getting pending reboot information...]LOG]!><time="15:22:41.775-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="3276" file="rebootcoordinator.cpp:4055">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is getting pending reboot information...]LOG]!><time="16:31:24.349-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="3928" file="rebootcoordinator.cpp:4055">

    <![LOG[Entered ScheduleRebootImpl - requested from 'UpdatesDeploymentAgent'. set Rebootby = 0. set NotifyUI = True. set PreferredRebootWindowType = 4]LOG]!><time="16:49:12.519-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4984" file="rebootcoordinator.cpp:663">

    <![LOG[Scheduled non mandatory reboot from agent UpdatesDeploymentAgent]LOG]!><time="16:49:12.519-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4984" file="rebootcoordinator.cpp:775">

    <![LOG[Raising client SDK event for class NULL, instance NULL, actionType 3l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l]LOG]!><time="16:49:12.537-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4984" file="event.cpp:529">

    <![LOG[Notify Windows power button that there is a pending reboot,so it will enable options like "Update and Reboot" etc. if OS support]LOG]!><time="16:49:12.541-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4984" file="rebootcoordinator.cpp:2312">

    <![LOG[Can not open Reg Key [Software\Microsoft\WindowsUpdate\Orchestrator], (0x80070002). Only Win 10 and up support this. Skip notifying windows power button for pending reboot]LOG]!><time="16:49:12.541-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4984" file="rebootcoordinator.cpp:2317">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is getting pending reboot information...]LOG]!><time="16:49:12.718-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:4055">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-2782 is getting pending reboot information...]LOG]!><time="16:49:12.718-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:4055">

    <![LOG[CRebootCoordinator::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.718-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:3632">

    <![LOG[CRebootCoordinator::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.718-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:3632">

    <![LOG[CRebootRequest::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.720-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:4069">

    <![LOG[CRebootRequest::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.720-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:4069">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is getting pending reboot information...]LOG]!><time="16:49:12.746-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:4055">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-2782 is getting pending reboot information...]LOG]!><time="16:49:12.746-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:4055">

    <![LOG[CRebootCoordinator::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.746-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:3632">

    <![LOG[CRebootCoordinator::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.746-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:3632">

    <![LOG[CRebootRequest::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.747-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:4069">

    <![LOG[CRebootRequest::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.747-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:4069">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is getting pending reboot information...]LOG]!><time="16:49:12.753-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:4055">

    <![LOG[CRebootCoordinator::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.753-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:3632">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-2782 is getting pending reboot information...]LOG]!><time="16:49:12.753-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:4055">

    <![LOG[CRebootCoordinator::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.753-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:3632">

    <![LOG[CRebootRequest::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.754-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="1236" file="rebootcoordinator.cpp:4069">

    <![LOG[CRebootRequest::GetPendingRebootInfo, Get NotifyUI = True]LOG]!><time="16:49:12.754-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="4636" file="rebootcoordinator.cpp:4069">

    <![LOG[User S-1-5-21-25853599-753233441-1128231545-11293 is requesting a reboot...]LOG]!><time="17:12:39.797-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:3962">

    <![LOG[MTC task does not exist. Creating new request.]LOG]!><time="17:12:39.800-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:1303">

    <![LOG[MTC allowed us to reboot]LOG]!><time="17:12:39.815-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:1320">

    <![LOG[MTC task for reboot 'a21a787a-4d4f-4751-ba6e-a255e7966c4d'. Checking if it can run now...]LOG]!><time="17:12:39.815-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:1282">

    <![LOG[MTC allowed us to reboot]LOG]!><time="17:12:39.815-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:1320">

    <![LOG[System reboot request succeeded.]LOG]!><time="17:12:39.834-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:1105">

    <![LOG[Closed ccmstore sqlce database.]LOG]!><time="17:12:39.836-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:131">

    <![LOG[Reboot initiated]LOG]!><time="17:12:39.836-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="2164" file="rebootcoordinator.cpp:1153">

    <![LOG[Retry resuming bit-locker TPM PIN protector. Retry count 1]LOG]!><time="17:19:01.402-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="3648" file="internal.cpp:35">

    <![LOG[Didn't suspended bit-locker. Do nothing and return.]LOG]!><time="17:19:01.418-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="3648" file="rebootcoordinator.cpp:2731">

    <![LOG[Reboot Coordinator received a SERVICEWINDOWEVENT START Event]LOG]!><time="22:00:00.028-120" date="09-27-2017" component="RebootCoordinator" context="" type="1" thread="952" file="rebootcoordinator.cpp:3457">

    <![LOG[Reboot Coordinator received a SERVICEWINDOWEVENT END Event]LOG]!><time="05:00:00.039-120" date="09-28-20

    Thursday, November 30, 2017 4:40 PM
  • Da hat mMn jemand auf "Reboot" geklickt: "User S-1-5-21-25853599-753233441-1128231545-11293 is requesting a reboot"

    Torsten Meringer | http://www.mssccmfaq.de

    Friday, December 01, 2017 7:22 AM
    Answerer