Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Group Policy and enabling Windows update

Posted on 2014-01-16
3
763 Views
Last Modified: 2014-01-16
Hello:

I have configured windows update and enabled it under both user and computer configuration in GPO on server 2008R2.

I verified GPO is pushed down successfully to the PC but under services on the PC windows update is disabled.

I could manually turn it on but I wnat to figure out why this service is not running.  

The BITS service is not running either.  Can you enable both these windows services using GPO? Or am I missing somethng on my GPO?

I am not using WSUS.
0
Comment
Question by:pllr
  • 2
3 Comments
 

Author Comment

by:pllr
ID: 39786357
Here's the result from gpresult /z



    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            GPO: User Policy - windows update enable
                Name:         Regedit.exe
                Parameters:   /s noIE10.reg
                LastExecuted: 6:27:07 PM

        Logoff Scripts
        --------------
        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\JunkMailProtection
                Value:       6, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\InForest
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\EveryDays
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DoAging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveDelete
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivegranularity
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DeleteExpired
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\PromptForAging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\UpdatePromptSettings
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archiveperiod
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\doaging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\EditorPreference
                Value:       1, 0, 2, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\Restricted
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\everydays
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveGranularity
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Cac
hed Mode\CachedExchangeMode
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\11.0\Word\Securi
ty\Level
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveOld
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\opt
ions\mail\editorpreference
                Value:       0, 0, 2, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\NoDriveTypeAutoRun
                Value:       255, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\NoStartMenuMyGames
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchivePeriod
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\NoWarningNoElevationOnInstall
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaveActive
                Value:       49, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\deleteexpired
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivemount
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\ServerList
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveMount
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivedelete
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaverIsSecure
                Value:       49, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\Run\1
                Value:       99, 0, 58, 0, 92, 0, 112, 0, 108, 0, 108, 0, 114, 0
, 92, 0, 112, 0, 112, 0, 111, 0, 112, 0, 117, 0, 112, 0, 46, 0, 101, 0, 120, 0,
101, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\promptforaging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DisableManualArchive
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\TrustedServers
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\JunkMailTrustOutgoingRecipients
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\SCRNSAVE.EXE
                Value:       67, 0, 58, 0, 92, 0, 87, 0, 105, 0, 110, 0, 100, 0,
 111, 0, 119, 0, 115, 0, 92, 0, 83, 0, 121, 0, 115, 0, 116, 0, 101, 0, 109, 0, 5
1, 0, 50, 0, 92, 0, 115, 0, 115, 0, 84, 0, 101, 0, 120, 0, 116, 0, 51, 0, 100, 0
, 46, 0, 115, 0, 99, 0, 114, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Cac
hed Mode\Enable
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archiveold
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaveTimeOut
                Value:       49, 0, 56, 0, 48, 0, 48, 0, 0, 0
                State:       Enabled

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            GPO: User Policy - windows update enable
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No

        Internet Explorer Connection
        ----------------------------
            HTTP Proxy Server:   N/A
            Secure Proxy Server: N/A
            FTP Proxy Server:    N/A
            Gopher Proxy Server: N/A
            Socks Proxy Server:  N/A
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      No

        Internet Explorer URLs
        ----------------------
            GPO: User Policy - windows update enable
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A

        Internet Explorer Security
        --------------------------
            Always Viewable Sites:     N/A
            Password Override Enabled: False

            GPO: User Policy - windows update enable
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       Yes
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No

        Internet Explorer Programs
        --------------------------
            GPO: User Policy - windows update enable
                Import the current Program Settings: No

C:\Users\dphung>
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 500 total points
ID: 39786394
Windows Update is a *Computer* based policy. The only user based policies are:

"Remove access to use all Windows Update Features"
"Do not adjust default option to 'Install Updates and Shutdown' in shutdown windows dialog box"
"Do not Display 'Install Updates and Shutdown' option in Shut Down Windows dialog box"

Go over

https://support.microsoft.com/kb/2730071

And

especially https://support.microsoft.com/kb/959894

^^^You may have a virus issue ^^^
0
 

Author Comment

by:pllr
ID: 39786864
I ended up having to configure GPO to enable wuauserv,
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question