Critical Windows Updates are bypassing my GPO and rebooting the server

Posted on 2011-10-20
Last Modified: 2012-05-12
Hi All,

Over the past few days our 2008 Terminal Server has rebooted itself during work hours. Both times the event logs have alerted us to Critical Windows updates being installed prior to the reboot so i can only imagine this is the cause.

I have a network wide GPO in place on all Servers that stops windows updates being downloaded and installed without approval. But some are still getting through, is there an option to stop ciritcal updates being installed?
Question by:ncomper
    LVL 11

    Expert Comment

    I don't use 'automatic windows update' on Servers, Servers are updated manually , only then i have total control.

    But your way is also good, you must check your GP settings and check what GP are applied on Server with gpresult command
    LVL 41

    Accepted Solution

    Are you using WSUS? Do any of your WSUS approved updates have an installation deadline? An installation deadline would cause this behavior.
    LVL 5

    Author Closing Comment

    Thanks, hit the nail on the head. WSUS was the culprit.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Are you having trouble running ADPREP on your current 32-bit Domain Controller? Have you ran ADPREP multiple times on your Domain but still get an error stating you have not prepared your Domain yet? Here is a change that gets even the most seaso…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will give a short introduction and overview of Backup Exec 2014 and the additional features that have been added over its predecessor Backup Exec 2012. As with Backup Exec 2012, the Backup Exec button in the upper left corner. From her…
    This tutorial will show how to inventory, catalog, and restore media from legacy versions of Backup Exec into both 2012 and 2014 versions of the software. Select Storage from the tabs along the ribbon bar as the top: Ensure the proper storage devi…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now