Wsus settings windows 10

Question

question

GracjanPodcki-1193 asked May 5, '22 RitaHu-MSFT edited May 10, '22

Wsus settings windows 10

Hi
After many tests i cannot define how to set below settings to be relevant in my environmnet
what i need

set gpo to immidietaly install updates from wsus to windows 10 machines
after install notify user that he need restart machine or machine will be restarted within 12 hours automatically regardless someone is logged in or not
User cannot defer restart but he needs to be aware that he received proper info on screen
i do not want define working hours on these windows 10 machines

After many mixing settings in my windows2012r2 server i cannot simply achieve such results
Please help
thx

windows-server windows-10-general windows-server-update-services windows-server-2012

· 3

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT · May 06 at 05:58 AM

@GracjanPodcki-1193
In order to help me research further, please help to provide the configuration of your group policies applied in detail.

Also, please provide the following registry value:

 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

I will try to test it in my lab first.

Thanks for your understanding and coopeation.

Best regards,
Rita

0 ·

RitaHu-MSFT · May 09 at 10:13 AM

@GracjanPodcki-1193
May I know the status of the case? Is there any updates of the case. Please let me know if there are any updates.

Looking forward to your feedback.

Have a great day.

Best regards,
Rita

0 ·

GracjanPodcki-1193 RitaHu-MSFT · May 09 at 01:56 PM

Hi
This is my regedit:

and my wsus settings in gpo:

0 ·

obraz.png (22.4 KiB)

obraz.png (81.6 KiB)

obraz.png (39.0 KiB)

Answer 1 · 2022-05-10T07:15:16.127Z

LimitlessTechnology-2700 answered May 10, '22

Hi there,

By default, Group Policy refreshes in the background every 90 minutes, with a random offset of 0 to 30 minutes. If you want to refresh Group Policy sooner, you can go to a command prompt on the client computer and type: gpupdate /force.

The following is a list of the Group Policy options available for configuring WSUS-related items in the environment. Configure Automatic Updates by Using Group Policy
https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127451

If you do not want to define working hours you can have Windows automatically adjust active hours based on your device’s activity.

Get updates when you're away from your PC with active hours in Windows https://support.microsoft.com/en-us/windows/get-updates-when-you-re-away-from-your-pc-with-active-hours-in-windows-09b5376c-7647-4361-1423-c29aa692a8c4

--If the reply is helpful, please Upvote and Accept it as an answer–

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2022-05-10T08:12:30.227Z

RitaHu-MSFT answered May 10, '22 RitaHu-MSFT edited May 10, '22

Hello @GracjanPodcki-1193
Thanks for your response.

after install notify user that he need restart machine or machine will be restarted within 12 hours automatically regardless someone is logged in or not

I haven't found any related group policy which could implement this function right now. Perhaps I missed the other point. According to your goal, I share my thoughts on your needs. If it were me, I would refer to the following group policies.

Configure Automatic Updates - 4
Specify deadline before auto-restart for update installation
Configure auto-restart warning notifications schedule for updates
Allow Automatic Updates immediate Installation
Turn off auto-restart for updates during active hours (There is no such group policy we could refer to force the device restart in next 12 hours)

Reference link:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-restart?msclkid=d8c5c823d03311eca92d142b762fb1bd

Best regards,
Rita

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question