Solved

Group Policy and enabling Windows update

Posted on 2014-01-16
3
751 Views
Last Modified: 2014-01-16
Hello:

I have configured windows update and enabled it under both user and computer configuration in GPO on server 2008R2.

I verified GPO is pushed down successfully to the PC but under services on the PC windows update is disabled.

I could manually turn it on but I wnat to figure out why this service is not running.  

The BITS service is not running either.  Can you enable both these windows services using GPO? Or am I missing somethng on my GPO?

I am not using WSUS.
0
Comment
Question by:pllr
  • 2
3 Comments
 

Author Comment

by:pllr
ID: 39786357
Here's the result from gpresult /z



    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            GPO: User Policy - windows update enable
                Name:         Regedit.exe
                Parameters:   /s noIE10.reg
                LastExecuted: 6:27:07 PM

        Logoff Scripts
        --------------
        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\JunkMailProtection
                Value:       6, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\InForest
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\EveryDays
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DoAging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveDelete
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivegranularity
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DeleteExpired
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\PromptForAging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\UpdatePromptSettings
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archiveperiod
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\doaging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\EditorPreference
                Value:       1, 0, 2, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\Restricted
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\everydays
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveGranularity
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Cac
hed Mode\CachedExchangeMode
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\11.0\Word\Securi
ty\Level
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveOld
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\opt
ions\mail\editorpreference
                Value:       0, 0, 2, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\NoDriveTypeAutoRun
                Value:       255, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\NoStartMenuMyGames
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchivePeriod
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\NoWarningNoElevationOnInstall
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaveActive
                Value:       49, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\deleteexpired
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivemount
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\ServerList
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveMount
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivedelete
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaverIsSecure
                Value:       49, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\Run\1
                Value:       99, 0, 58, 0, 92, 0, 112, 0, 108, 0, 108, 0, 114, 0
, 92, 0, 112, 0, 112, 0, 111, 0, 112, 0, 117, 0, 112, 0, 46, 0, 101, 0, 120, 0,
101, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\promptforaging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DisableManualArchive
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\TrustedServers
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\JunkMailTrustOutgoingRecipients
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\SCRNSAVE.EXE
                Value:       67, 0, 58, 0, 92, 0, 87, 0, 105, 0, 110, 0, 100, 0,
 111, 0, 119, 0, 115, 0, 92, 0, 83, 0, 121, 0, 115, 0, 116, 0, 101, 0, 109, 0, 5
1, 0, 50, 0, 92, 0, 115, 0, 115, 0, 84, 0, 101, 0, 120, 0, 116, 0, 51, 0, 100, 0
, 46, 0, 115, 0, 99, 0, 114, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Cac
hed Mode\Enable
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archiveold
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaveTimeOut
                Value:       49, 0, 56, 0, 48, 0, 48, 0, 0, 0
                State:       Enabled

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            GPO: User Policy - windows update enable
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No

        Internet Explorer Connection
        ----------------------------
            HTTP Proxy Server:   N/A
            Secure Proxy Server: N/A
            FTP Proxy Server:    N/A
            Gopher Proxy Server: N/A
            Socks Proxy Server:  N/A
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      No

        Internet Explorer URLs
        ----------------------
            GPO: User Policy - windows update enable
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A

        Internet Explorer Security
        --------------------------
            Always Viewable Sites:     N/A
            Password Override Enabled: False

            GPO: User Policy - windows update enable
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       Yes
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No

        Internet Explorer Programs
        --------------------------
            GPO: User Policy - windows update enable
                Import the current Program Settings: No

C:\Users\dphung>
0
 
LVL 47

Accepted Solution

by:
dstewartjr earned 500 total points
ID: 39786394
Windows Update is a *Computer* based policy. The only user based policies are:

"Remove access to use all Windows Update Features"
"Do not adjust default option to 'Install Updates and Shutdown' in shutdown windows dialog box"
"Do not Display 'Install Updates and Shutdown' option in Shut Down Windows dialog box"

Go over

https://support.microsoft.com/kb/2730071

And

especially https://support.microsoft.com/kb/959894

^^^You may have a virus issue ^^^
0
 

Author Comment

by:pllr
ID: 39786864
I ended up having to configure GPO to enable wuauserv,
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
OfficeMate Freezes on login or does not load after login credentials are input.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now