locked
WSUS/GPO - no auto-installation of updates RRS feed

  • Question

  • We run WSUS 2012 R2 and have configured a GPO to control how updates get installed. Our take here is to install updates automatically on client PC's, every Monday, 7am, or starting from Montady 7am (depending when users get logged in. Therefore we have configured "Configure Automatic Updates" with option 4 and accordingly scheduled install day and time.
    But what happens is that we get Updates downloaded and see the yellow sign at shutdown button (Win7). Now the user can install updates but they are not installed automatically. Additionally I have set "Turn on Software Notification" to disabled, since I thought this might be the cause for the above described behaviour, before it was enabled. But this change brought now change. Also "No auto-restart with logged on user...." is enabled, in order to allow users do reboot at any desired time.
    Now my question is, are my expectations re. automatic update INSTALLATION wrong or is there any GPO setting preventing this from happening?

    kind regards,
    Dieter Tontsch
    mobileX AG
    Monday, June 22, 2015 3:02 PM

Answers

  • Hello,

    it is not an issue of reboot or not. I guess I misinterpreted the meaning and real effect fo the gpo settings in charge. It is rather hard to create a real scenario while testing when it comes to days of week.

    It looks like GPO-settings work as expected, but If I already have manually installed and rebooted my PC after the due date, e.g. Monday, 7h, new arriving updates come along and are downloaded, but not forced installed untill next due date. This fact was what confused me, I get the updates delivered and get them offered to install, but I am not forced to, untill the date due.

    I have now set up a new GPO just for me where I have set that due date one hour in the future from now (in order to speed up testing), and guess what happend, after that hour my PC came up with the reboot waring after updates where installed.

    So, I guess it works as expeced if one waits till date/time set.

    kind regards,

    Dieter Tontsch

    mobileX AG

    Wednesday, June 24, 2015 3:52 PM

All replies

  • I found this post WSUS - Clients auto-downloading but not auto-installing? Help! -  which describes the same issue as mine. But the only reply marked as answer does not apply to me since I have these settings as suggested. Except "reschedule automatic update scheduled installations" is configured to 10 min. But I don't see why this should affect my GPO in order to only download but not install updates.

    Dieter

    Monday, June 22, 2015 3:14 PM
  • Hi Dieter,

    If we reboot the client manually, does update start to install?

    If yes, the cause of this issue is that the client is waiting for reboot. Please try to disable the "No auto-restart with logged on user".

    Also, we may try to set a deadline. For the detailed information about the behavior with the deadline, please refer to the link below,

    https://technet.microsoft.com/en-us/library/cc708585(v=ws.10).aspx

    Best Regards.


    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Wednesday, June 24, 2015 9:57 AM
  • Hello,

    it is not an issue of reboot or not. I guess I misinterpreted the meaning and real effect fo the gpo settings in charge. It is rather hard to create a real scenario while testing when it comes to days of week.

    It looks like GPO-settings work as expected, but If I already have manually installed and rebooted my PC after the due date, e.g. Monday, 7h, new arriving updates come along and are downloaded, but not forced installed untill next due date. This fact was what confused me, I get the updates delivered and get them offered to install, but I am not forced to, untill the date due.

    I have now set up a new GPO just for me where I have set that due date one hour in the future from now (in order to speed up testing), and guess what happend, after that hour my PC came up with the reboot waring after updates where installed.

    So, I guess it works as expeced if one waits till date/time set.

    kind regards,

    Dieter Tontsch

    mobileX AG

    Wednesday, June 24, 2015 3:52 PM