Window Updates WSUS Questions

wantabe2
wantabe2 used Ask the Experts™
on
I have a Windows 2008 & Windows 7 & Vista domain that get the Windows updates from WSUS. Is there any way I can adjust my WSUS GPO to not allow the user to postpone a restart longer than 10 minutes?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Mohamed ElManakhlyInfrastructure Team Leader

Commented:
yes this is a setting in the GPO named "Allow Updates immediate installtion" enable it

Commented:
Sure is
http://technet.microsoft.com/en-us/library/cc720539%28WS.10%29.aspx

Delay Restart for Scheduled Installations

This policy specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart.

If the status is set to Enabled, a scheduled restart will occur the specified number of minutes after the installation is finished.

If the status is set to Disabled or Not Configured, the default wait time is five minutes.
To delay restart for scheduled installations

    In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

    In the details pane, click Delay restart for scheduled installations, and set the option.

    Click OK.

Re-prompt for Restart with Scheduled Installations

This policy specifies the amount of time for Automatic Updates to wait before prompting the user again for a scheduled restart.

If the status is set to Enabled, a scheduled restart will occur the specified number of minutes after the previous prompt for restart was postponed.

If the status is set to Disabled or Not Configured, the default interval is 10 minutes.
To re-prompt for restart with scheduled installations

    In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

    In the details pane, click Re-prompt for restart with scheduled installations, and set the option.

    Click OK.

Author

Commented:
At this time this setting in my GPO is set to "not configured". If I enable it, will my clients download the updates & install them automatically & if a restart is required what will happen? Attached is a screenshot of this GPO & what I have enabled.
wsus.JPG
Mohamed ElManakhlyInfrastructure Team Leader
Commented:
This policy only allows for the immediate installation of minor updates. This policy setting specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows. If this policy is enabled, AU will immediately install these updates once they are downloaded and ready to install. If enabled this policy will override notify for install or scheduled installation configuration for these types of updates (Copied from technet)

http://technet.microsoft.com/en-us/library/cc512630.aspx
If you are asking this question it is assumed that you have set the Configure Automatic Updates policy to enabled and are using setting 4.  From what I can see there is no way to explicitly set the number of times a user can postpone a restart.  There are a couple of other policies that may help.  The first is the Re-prompt for restart with scheduled installations.  With this setting you could set the number of minutes it waits before asking again.  This way instead of 10 minutes per postpone you could have it prompt them every 2 minutes in essence frustrating the user until they finally just save their data and wait for the restart.  In addition there is the Delay Restart for scheduled installations.  This will wait a specified amount of time after install for the restart.  It does not explicitly say, but this may allow you to for example set it for a 15 minute delay and after that 15 minutes it will be restarted.  (however the user may be able to postpone still I have not confirmed)  These are all located in Computer Configuration\Administrative Templates\Windows Components\Windows Update.  I hope this helps.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial