dbeutler
asked on
Windows 2003 SP2 changed server automatic update settings
We recently installed Windows Server 2003 Service Pack 2 on a group of servers. The problem was that the service pack changed the settings for automatic updates, but only on just over half of our servers. Previously, the automatic updates were all set to automatically download updates and let me choose when to install them. After the SP2 installation and unbeknownst to me, the setting was changed to automatically download and install updates at 3 AM. Needless to say this was a huge issue the next day when, at 3 AM, our servers started going down. Unscheduled downtime is not fun in any server admin's world. To complicate the matters, the SQL service on one of the servers failed to start because of the reboot. My questions: What happened to cause some servers to have their automatic update settings changed? Is this a know change that happens with SP2? Is there any way to prevent this in the future?
To prevent it in the future be sure to use Group Policy to Define the Windows Update Settings. Place you servers in their own OU (or OUs) and apply the policy at that level. If the setting "somehow change" even at the local policy level domain group policies will change them back. Be sure to set "No auto-restart for scheduled Automatic Updates installations"
Just make sure you configure Automatic Updates manually to the setting you want.
Agree with francrl. Use group policy.
best solution is to use group policy
ASKER
So far, I don't think I have had any of my questions answered. They were:
What happened to cause some servers to have their automatic update settings changed?
Is this a know change that happens with SP2?
Is there any way to prevent this in the future?
Ok, the last one has been kindof answered with the group policy thing, but I don't even know how to do that on the domain wide level.
Thanks,
Danny
What happened to cause some servers to have their automatic update settings changed?
Is this a know change that happens with SP2?
Is there any way to prevent this in the future?
Ok, the last one has been kindof answered with the group policy thing, but I don't even know how to do that on the domain wide level.
Thanks,
Danny
The first questions, I honestly dont know why that happened to you. I have done those updates and have not had the problem. It may have something to do with what it was set to before the install.
In regards to the Group Policy. If you want this to turn off Automatic Updates across the domain then create a new GPO at teh domain level to turn it off. If you only want certain servers to have the Auto Update turned off then create a new OU and move the servers to this OU. Create a GPO within the new OU to set Auto Updates.
In regards to the Group Policy. If you want this to turn off Automatic Updates across the domain then create a new GPO at teh domain level to turn it off. If you only want certain servers to have the Auto Update turned off then create a new OU and move the servers to this OU. Create a GPO within the new OU to set Auto Updates.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Either way, after you do the SP2 update on your servers I would check the Automatic Update feature to make sure it is set to your requirements.