locked
Windows Updates are installed out of the scheduled install time defined by GPO RRS feed

  • Question

  • Hi all,

    I am in an issue with Windows 2012R2 server which was installed Windows Updates automatically out of the defined scheduled install time pushed by GPO.

    The GPO policy defines "Computer Configuration-> Administrative Templates ->Windows Components -> Windows Updates -> Configure Automatic Updates" as Enabled and option 4 (Auto download and schedule the installation), as well as the scheduled install day as "Every Saturaday", scheduled install time as "01:00".

    However, the server installed the updates on 15:08 yesterday (Thu) and I could see the below weird logs in C:\Windows\windowsupdates.log

    2019-08-15 14:53:43:580 768 b0c AU Changing existing AU client directive from 'Safe to reboot detection for Active session' to 'Reboot Warning', session id = 0x1
    2019-08-15       14:53:43:580 768 b0c AU Launched new AU client for directive 'Reboot Warning', session id = 0x8

    2019-08-15 15:08:43:582 768 b0c AU Auto-logon after WU reboot was requested. Trying to enable...
    2019-08-15 15:08:43:676 768 b0c Shutdwn WARNING: Could not enable auto-logon after next reboot (hr=0x00000000, ntstatus=0xc00704ec).
    2019-08-15 15:08:43:676 768 b0c AU Failed to enable auto-logon after WU reboot - hr = 0xD00704EC
    2019-08-15 15:08:43:676 768 b0c AU AU invoking RebootSystem (OnRebootNow)
    2019-08-15 15:08:43:676 768 b0c AU Allowing auto firmware installs at next shutdown
    2019-08-15 15:08:43:801 768 b0c Misc WARNING: SUS Client is rebooting system.

    Please advise where would be the cause. Many thanks.

    Friday, August 16, 2019 6:18 AM

All replies

  • Hi Shawn,
      

    In addition to the following group policies:
      

    • Specify intranet Microsoft update service location
    • Configure Automatic Updates
        

    Are other group policies for Windows Update enabled in your environment?
    Providing this information will help with the analysis of the problem.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, August 16, 2019 6:55 AM
  • Did you confirmed the applied GPO settings for WSUS?

    Friday, August 16, 2019 8:13 AM
  • Review your GPO policy settings with the ones in part 4 of my 8 part blog series on How to Setup, Manage, and Maintain WSUS - https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

    Part 4 deals with the GPO policies. I invite you to read the rest of the series as well as other guides on my site.


    Adam Marshall, MCSE: Security
    https://www.ajtek.ca
    Microsoft MVP - Windows and Devices for IT

    Saturday, September 7, 2019 4:33 AM