locked
Unable to install updates RRS feed

  • Question

  • Hi,

    The only way I can install updates on my servers are by shutting them down. then they install and then I boot up the server.

    I have gpo configured to have admins install but when I click on window update I get the below message even know there are pending updates to be installed. 

    Any suggestions? Am I missing something in gpo? I am a local admin on the server.

    thX


    Wave~Chaser

    Tuesday, August 5, 2014 3:31 PM

Answers

  • the GPO options you have defined match the screenshot yeah, although I would uncheck the option locally to allow Users to install updates, it's not safe and if you're a local admin then it's not necessary

    I don't believe this to be an access issue, you obviously have rights to shut down the server and say you're local admin so that's probably not it but...I could be wrong

    you need to check out the logs and see what the failure is about

    • Marked as answer by Daniel JiSun Friday, August 15, 2014 8:14 AM
    Tuesday, August 5, 2014 8:25 PM

All replies

  • I have gpo configured to have admins install

    Apparently not.

    What are the *actual* configurations applied to *this* server?

    What actual account were you logged on with when you ran this WU task?

    Looks to me like this server hasn't been patched in over two months, and the last attempt failed.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Tuesday, August 5, 2014 4:37 PM
  • Also, if you click on "Change settings", what is the setting for "Who can install updates"?


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Tuesday, August 5, 2014 4:57 PM
  • See below...  I have my servers in another domain with the same gpo config and it works fine

    Wave~Chaser

    Tuesday, August 5, 2014 5:06 PM

  • Wave~Chaser

    Tuesday, August 5, 2014 5:08 PM
  • all your servers have this problem?

    your GPOs appear to be ok from a config standpoint based on your GPMC screenshots but you should run an RSOP from one server to ensure GPOs are actually coming down to the box

    can you check the %windir%\windowsupdate.log file for more details on the error of an update failing to install as an example? what errors are in the System event log when the updates fail to install via user trigger?

    and in terms of failure, do they fail as you install them or do they only fail after the reboot?

    Tuesday, August 5, 2014 7:54 PM
  • Ran the rsop all is good. I just found out we had a firewall issue so the updates are hitting the clients now. But the servers still have the same message. Does the gpo config say that I should be able to install the update whenever correct?

    Wave~Chaser

    Tuesday, August 5, 2014 8:02 PM
  • the GPO options you have defined match the screenshot yeah, although I would uncheck the option locally to allow Users to install updates, it's not safe and if you're a local admin then it's not necessary

    I don't believe this to be an access issue, you obviously have rights to shut down the server and say you're local admin so that's probably not it but...I could be wrong

    you need to check out the logs and see what the failure is about

    • Marked as answer by Daniel JiSun Friday, August 15, 2014 8:14 AM
    Tuesday, August 5, 2014 8:25 PM