locked
WInodws 10 and WSUS RRS feed

  • Question

  • We are implementing WSUS in a Horizon View VDI environment.  This questions will be just pertaining to updating dedicated VMs within this VDI environment.  OS is Windows 10 1803

    We have the following regedit entries

    HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    • WUServer  - server URL
    • WUStatusServer - same as above
    • TargetGroupEnabled - 1
    • SetActiveHours - 1
    • SetEngagedRestartTransitionSchedule - 1
    • EngagedRestartDeadline - 2
    • EngagedRestartSnoozeSchedule - 2
    • EngagedRestartTransitionSchedule - 2
    • TargetGroup - Target Group Name
    •  ActiveHoursStart - 7
    • ActiveHoursEnd - 18

    HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\

    • NoAutoUpdate - 0
    • UseWUServer - 1
    • AUOptions - 4
    • DetectionFrequency - 22
    • DetectionFrequencyEnabled - 1
    • AllowMMUpdateService - 1
    • ScheduledInstallDay - 3
    • ScheduleInstallTime - 3

    With these setting, the VM registers itself with the WSUS server and computer group.  It will download any needed update, and install at the appropriate time.  I had set these settings wanting to do engaged restart.  IT is my understanding that if the user is logged in it will prompt for a restart - if the user is not logged in it will reboot outside of active hours.  This will be within the EngagedRestartDeadline (my purpose - 2 days).  Then after two days, it will attempt to notify the user to schedule the reboot, allowing the user to 'snooze this'  during the EngagedRestartSnoozeSchedule (again, with my settings two days).  After this period, it will change to a pending reboot (again, for my settings, two days).  However, I am not getting any notifications.  Do I need to add other settings for the notifications within the Engaged Restart process?  

    Monday, November 11, 2019 3:11 PM

All replies

  • Hi Tom,
      

    Based on your description, I will provide the following suggestions for your reference:
       

     IT is my understanding that if the user is logged in it will prompt for a restart - if the user is not logged in it will reboot outside of active hours.

    Please adjust the following group policies:
       

    • [Allow non-administrators to receive update notifications] Set to enabled.
          

    This will be within the EngagedRestartDeadline (my purpose - 2 days).  Then after two days, it will attempt to notify the user to schedule the reboot, allowing the user to 'snooze this'  during the EngagedRestartSnoozeSchedule (again, with my settings two days).  After this period, it will change to a pending reboot (again, for my settings, two days). 

    Please adjust the following group policies:
       

    • [Specify engaged restart transition and notification schedule for updates] Set to Enabled.
      - Transition (days): 2
      - Snooze (days): 1
      - Deadline (days): 0  
          
    • [Configure Auto-restart required notification for updates] Set to Enabled.
      - Method: 2 - User Action
          

    For reference, this article explains some of the above policies: "Enforcing compliance deadlines for updates". You can also adjust it by referring to the suggestions.
    Hope the above can help you.
      

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, November 12, 2019 2:45 AM
  • Hi Tom,
     

    Any update is welcome here.
    If the issue is resolved, share your solution or find the helpful response "Mark as Answer" to help other community members find the answer.
     

    Thank you for your cooperation, as always.
     

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, November 15, 2019 6:41 AM