Windows Update

I just took over Administration of an SBS 2008 box with 20 connected workstations.  

Windows update is disabled on the server and workstations.  If I activate and start the service on the server it stays up then disables itself again overnight.  

Am I missing something in Group Policy or Task manager?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Nick RhodeIT DirectorCommented:
Use WSUS for SBS to download/install/push updates to client workstations.  That is on by default for small business servers.
Hypercat (Deb)Commented:
As mentioned by NRhode, WSUS is enabled and configured by default for SBS 2008.  This is the preferred way to manage settings for Windows update.  There are several default group policies that control Windows update settings for both servers and workstations.  If you open the GPMC, you should see those policies listed under your domain and be able to check the settings from there.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DesertDawgAuthor Commented:
WSUS will not push updates to the workstations if Windows Update is disabled.  In fact, with Windows Update disabled, WSUS won't even download new updates to the server.

For some reason, a previous administrator has figured out how to disable the Windows Update Service, which I can re-enable.....but only for a few hours then it disables itself again.

I'm looking for a way to make the enabled Windows Update permanent.
Hypercat (Deb)Commented:
In group policies, there is a settings to "Remove access to use all Windows Update features" in the following location:

User Configuration/Policies/Administrative Templates/Windows Components/Windows Update

This is most likely the cause of your issue. Check all of the existing policies, including the Default Domain Policy and all the SBS policies to see which one of them has this setting enabled and then set it to "Disabled."  This will change the setting on the workstations to ENABLE Windows update.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.