question

GracjanPodcki-1193 avatar image
0 Votes"
GracjanPodcki-1193 asked RitaHu-MSFT edited

Wsus settings windows 10

Hi
After many tests i cannot define how to set below settings to be relevant in my environmnet
what i need

  1. set gpo to immidietaly install updates from wsus to windows 10 machines

  2. after install notify user that he need restart machine or machine will be restarted within 12 hours automatically regardless someone is logged in or not

  3. User cannot defer restart but he needs to be aware that he received proper info on screen

  4. i do not want define working hours on these windows 10 machines

After many mixing settings in my windows2012r2 server i cannot simply achieve such results
Please help
thx



windows-serverwindows-10-generalwindows-server-update-serviceswindows-server-2012
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@GracjanPodcki-1193
In order to help me research further, please help to provide the configuration of your group policies applied in detail.

Also, please provide the following registry value:

 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

I will try to test it in my lab first.

Thanks for your understanding and coopeation.

Best regards,
Rita

0 Votes 0 ·

@GracjanPodcki-1193
May I know the status of the case? Is there any updates of the case. Please let me know if there are any updates.

Looking forward to your feedback.

Have a great day.

Best regards,
Rita

0 Votes 0 ·

Hi
This is my regedit:

200313-obraz.png


and my wsus settings in gpo:

200314-obraz.png


200304-obraz.png


0 Votes 0 ·
obraz.png (22.4 KiB)
obraz.png (81.6 KiB)
obraz.png (39.0 KiB)
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hi there,

By default, Group Policy refreshes in the background every 90 minutes, with a random offset of 0 to 30 minutes. If you want to refresh Group Policy sooner, you can go to a command prompt on the client computer and type: gpupdate /force.

The following is a list of the Group Policy options available for configuring WSUS-related items in the environment. Configure Automatic Updates by Using Group Policy
https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127451

If you do not want to define working hours you can have Windows automatically adjust active hours based on your device’s activity.

Get updates when you're away from your PC with active hours in Windows https://support.microsoft.com/en-us/windows/get-updates-when-you-re-away-from-your-pc-with-active-hours-in-windows-09b5376c-7647-4361-1423-c29aa692a8c4



--If the reply is helpful, please Upvote and Accept it as an answer–

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

Hello @GracjanPodcki-1193
Thanks for your response.

after install notify user that he need restart machine or machine will be restarted within 12 hours automatically regardless someone is logged in or not

I haven't found any related group policy which could implement this function right now. Perhaps I missed the other point. According to your goal, I share my thoughts on your needs. If it were me, I would refer to the following group policies.

Configure Automatic Updates - 4
Specify deadline before auto-restart for update installation
Configure auto-restart warning notifications schedule for updates
Allow Automatic Updates immediate Installation
Turn off auto-restart for updates during active hours (There is no such group policy we could refer to force the device restart in next 12 hours)

Reference link:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-restart?msclkid=d8c5c823d03311eca92d142b762fb1bd

Best regards,
Rita

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.