locked
Vista Security Center, Automatic Updates and Group Policy RRS feed

  • Question

  • I've a Windows Server 2008 Group Policy set for a few Windows XP/Vista clients. I've enabled Automatic Updates and set them to download and install at 10am every day from a WSUS server. The policy works perfectly for all clients, however when I open the Security Center on the Vista clients, "Automatically updating" is listed as off.

    In the Security Center under Automatic Updating there's an option "Change Settings". If I click it, then select "Install updates automatically (recommended)", I get an error "Security Center can't change your automatic updating settings".

    In the Control Panel -> Windows Update -> Change Settings, it's set to "Install updates automatically" every day at 10am. It's also set to download the recommended updates.

    Any ideas?

    Monday, August 18, 2008 2:25 PM

Answers

  •  

    Run an rsop.msc on the clients and see if the clients are getting that policy.
    Tuesday, August 19, 2008 3:03 PM

All replies

  •  

    Run an rsop.msc on the clients and see if the clients are getting that policy.
    Tuesday, August 19, 2008 3:03 PM
  • Thanks, that was very helpful. I managed to track it down to the Windows Update service.

     

    Under Computer Configuration - Policies - Windows Settings - Security Settings - System Services, I had the Windows Update service set to start automatically. The security settings for the service were set to SYSTEM - Full Control, Administrators - Full Control, INTERACTIVE - Read.

     

    I changed it back to undefined and it's all green now in the Security Center.

    Tuesday, August 26, 2008 1:34 PM