verify GPO for WSUS

Posted on 2007-10-19
Last Modified: 2008-05-31
we have our WSUS server and we  have these GPO settings:

Delay Restart for scheduled installations Disabled
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box Disabled
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box Disabled
No auto-restart for scheduled Automatic Updates installations Enabled
Re-prompt for restart with scheduled installations Enabled

but our servers get rebooted whenever the updates are installed, and we don't want that to happen.

any help?

Question by:jskfan
    LVL 30

    Accepted Solution

    Run gpresult from a command prompt on each server to confirm that they are receiving the GPOs that you think they are.

    You can also run the Resultant Set of Policy Wizard against one or more servers to obtain a graphical view of this, as well as to see if the servers are receiving incorrect/conflicting settings from elsewhere in the AD tree, as described in the following tutorial:

    Author Comment

    I got this :
    Name     Link Location                   revision
    WSUS    domainanme/OUname      AD (43), Sysvol (43)
    LVL 30

    Assisted Solution

    Recommend you configure WSUS settings for your servers to use the "Auto download and notify for install" option.  This way an administrator can perform the installation at a convenient time, particularly if the patches for a particular month include ones that require a reboot.  You should not leave your servers indefinitely without a reboot if patches call for one, as this will leave your servers in an unprotected state.
    LVL 9

    Expert Comment

    what's the version of ur wsus client?

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    At least once a month I see a Question in one of the Windows Server related Zones asking about Best Practices for GPO Security.  I have been in IT for 20 years, and a Sys Ad for over 15.  I know this will sound cliché, but this is mostly a preferenc…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now