none
Server 2016 WSUS settings question RRS feed

  • Question

  • So I've got a WSUS server set up on my 2016 server and it deal with 99% 2016 clients. I've run into the issue that my servers are automatically installing updates instead of only installing approved updates. Below are my current registry settings. I also work in tandem with another Windows Engineer and we've been trying to get WSUS working using the GPO. So when he makes changes in the WSUS GPO settings it overrides the registry settings.

    Am I missing something as to why my servers are auto updating? In my other environment I have 2008/2012 servers with practically identical registry settings and they have no issues automatically updating unless the patches are approved by me.

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] 
    "AcceptTrustedPublisherCerts"=dword:00000001

    "BranchReadinessLevel"=dword:00000020

    "DeferFeatureUpdates"=dword:00000001

    "DeferFeatureUpdatesPeriodInDays"=dword:000000b4

    "DeferQualityUpdates"=dword:00000001

    "DeferQualityUpdatesPeriodInDays"=dword:00000000

    "DoNotConnectToWindowUpdateInternetLocations"=dword:00000000

    "WUServer"=xxxxxxxxx

    "WUStatusServer"=xxxxxxxxx

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] 

    "AlwaysAutoRebootAtScheduledTime"=dword:00000001

    "AlwaysAutoRebootAtScheduledTimeMinutes"=dword:0000000f

    "AUOptions"=dword:00000004 

    "AutoInstallMinorUpdates"=dword:00000001

    "DetectionFrequency"=dword:00000012 

    "DetectionFrequencyEnabled"=dword:00000001 

    "NoAutoRebootWithLoggedOnUsers"=dword:00000000 

    "NoAutoUpdate"=dword:00000000

    "ScheduledInstallDay"=dword:00000000 

    "ScheduledInstallTime"=dword:00000004 

    "UseWUServer"=dword:00000001 

    Friday, January 24, 2020 5:44 PM

All replies

  • You'll find the WSUS experts hang out over here in dedicated WSUS forum.

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverwsus

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    • Proposed as answer by Tim CerlingMVP Saturday, January 25, 2020 2:29 PM
    Friday, January 24, 2020 5:46 PM
  • Hello,
     
    Thank you for posting in our TechNet forum.
     
    According to our description, I understand our question is related to Microsoft WSUS. 
     
    So I suggest we submit a service request to the Microsoft official WSUS forum so that a dedicated support professional can further assist you with this request. 

    The following web site for more detail of Professional Support Options and incident submission methods is for your reference: WSUS  

    Thank you for your understanding and support.

    Best Regards, 
    Cynthia

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, January 31, 2020 9:45 AM