question

Dincos-1247 avatar image
0 Votes"
Dincos-1247 asked gabrielluiz answered

Windows servers 2016 auto restart after windows update install

Hi everybody,

There is my problem with servers 2016 OS. There is wsus server my platform. But windows 2016 servers can not working simultaneously this gpo settings. For example;

GPO settings; Download update and notify for install
Schedule install : everyday: 00:00 PM

but all server did install incoming update 03:00 AM and restart.

Is there solved auto restart problem ?

Thank you,
33081-event-1.png32977-wsus-config-2.png33008-wsus-config.png


windows-server-update-services
event-1.png (260.9 KiB)
wsus-config-2.png (212.1 KiB)
wsus-config.png (82.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

18737658 avatar image
0 Votes"
18737658 answered

勾选截图中红框内容33084-%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87-20201017214455.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Dincos-1247 avatar image
0 Votes"
Dincos-1247 answered

Thank you for answer 18737658. I've ticked the box. I will be test and sharing result.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hi Dincos-1247,


Thank you for posting on this forum.


To avoid misunderstanding, here is my understanding of this case. Please help to confirm:

The Windows Server 2016 client can not download and install the updates at 00:00 PM but all the Servers installed updates at 03:00 AM and restarted. Is it right?

But the GPO - Configure Automatic Updates are set "3" - Auto download and notify for install. In my opinion, the client will notify the users to install updates when there are updates to be installed. Why don't we choose the option "4" - Automatic download and schedule the install. The updates will download and install at the scheduled time.


In addition, the GPO - No auto-restart with logged on users for scheduled automatic updates installations will take action when users log on. If the users are not logged on, the clients will try to restart as soon so possible out of control.


It is recommended to apply the following policies instead:
33179-1.png

33180-2.png

Please try to apply the above policies first to see whether this issue will be resolved or not. If there are any updates about this issue, please keep us in touch.


Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



1.png (44.7 KiB)
2.png (21.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Dincos-1247 avatar image
0 Votes"
Dincos-1247 answered

Hi Ritahu,

Thank you for answer.

Servers automatically downloads and installs windows updates. But I don't want it to restart operating system unannounced from me.

I can't see in gpo settings specify active hours range for auto-restart.

How can i disable active hours on servers? My Domain controller OS version Server 2012 R2. Could it be because of this?33319-gpo-set.png



gpo-set.png (161.3 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hi Dincos,


Thanks for your response.


In my opinion, we could not restart the client manually. The only policy I knew is No auto-restart with logged on users for scheduled automatic updates installations. But this policy work when the users log on to the client. The clients will restart out of control when there is no user log on.


It is recommended to update the Administrative Templates files. The Windows Server 2012R2 hasn't the Specify active hours range for auto-restarts policy. I suspect the Administrative Templates files are not up to date. Please refer to the below link to update the Administrative Templates files.
https://docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store


Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Dincos-1247 avatar image
0 Votes"
Dincos-1247 answered RitaHu-MSFT commented

Hi Ritahu,

Thank you for advisor. I am updated administrative gpo settings on 2012 r2 domain controller. I make test and sharing result after coming update and install from wsus.

I will come back. :)

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Dincos-1247,


It seems there is no update for a couple of days. May we know the current status of the problem? Is there any other assistance we can provide?


If there are any updates about this issue, please let me know


Regards,
Rita

0 Votes 0 ·
Dincos-1247 avatar image
0 Votes"
Dincos-1247 answered

Hi Ritahu, I am back. :) but problem is continue. :/

All 2016 servers restart after windows update yesterday at 3 (AM).

Is there different way for this problem solved ?

I can't manage 2016 servers update.

Regards,
Osman

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered Dincos-1247 commented

@Dincos-1247


Thanks for your response.


Please help to check and share the key value of the registry as the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU


Thanks for your time and hope you have a nice day.
Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Rita,

You want this result Wsus or destination servers? Example one server for restart issue result is below;

40079-reg-result.png


0 Votes 0 ·
reg-result.png (277.7 KiB)
RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hi Dincos-1247,


According to the key value of the registry you provided, the Configure Automatic Updates policy is enabled 3.
40246-1.png

It is recommended to choose option 4 - Auto download and schedule the install
Reference picture:
40264-2.png

And you have checked the install during automatic maintence option. It is recommended to uncheck this option first.
Reference picture:
40116-3.png


As I posted above, we could not restart computers in windows 10 after installing the important updates. I recommended to apply the below policies to control the restart of the clients(choose one of the two):

[Turn off auto-restart for updates during active hours](recommended)
[No auto-restart with logged on users for scheduled automatic updates installations]

If there are any feedbacks about this issue, please feel free to let me know.

Thanks for your time and hope you have a nice day.


Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



1.png (229.8 KiB)
2.png (40.6 KiB)
3.png (42.7 KiB)
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi rita,

Thank you for answer. But between no eligible options. :/ because there is to some servers not login users. In this case this servers are restart. We don't want this.

0 Votes 0 ·

Hi Dincos-1247,


The Configure Automatic Updates option 3(Auto download and notify for install) is not used for the scheduled install time.
According to the below picture, the Scheduled install day and Scheduled install time are applicable option 4. So the key-value about schedule install day and scheduled install time is useless if you chose option 3.
40543-2.png


Reference picture of the registry in my lab:
40544-3.png



0 Votes 0 ·
2.png (41.8 KiB)
3.png (64.2 KiB)

Hi rita,

I did new wsus gpo for all server 2016 with option 4. Because I read a lot about subject at forums and they do not recommended option 3 on servers 2016.

I will test and sharing result when you come new update for server 2016.

Thank you for everything.

0 Votes 0 ·
Show more comments
gabrielluiz avatar image
0 Votes"
gabrielluiz answered

I'm also having this same problem.

I have Windows Server 2012 R2 and 2016 domain controllers.

My forest and domain is still at 2012 R2 level.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.