Solved

Group Policy and enabling Windows update

Posted on 2014-01-16
3
760 Views
Last Modified: 2014-01-16
Hello:

I have configured windows update and enabled it under both user and computer configuration in GPO on server 2008R2.

I verified GPO is pushed down successfully to the PC but under services on the PC windows update is disabled.

I could manually turn it on but I wnat to figure out why this service is not running.  

The BITS service is not running either.  Can you enable both these windows services using GPO? Or am I missing somethng on my GPO?

I am not using WSUS.
0
Comment
Question by:pllr
  • 2
3 Comments
 

Author Comment

by:pllr
ID: 39786357
Here's the result from gpresult /z



    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            GPO: User Policy - windows update enable
                Name:         Regedit.exe
                Parameters:   /s noIE10.reg
                LastExecuted: 6:27:07 PM

        Logoff Scripts
        --------------
        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\JunkMailProtection
                Value:       6, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\InForest
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\EveryDays
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DoAging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveDelete
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivegranularity
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DeleteExpired
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\PromptForAging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\UpdatePromptSettings
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archiveperiod
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\doaging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\EditorPreference
                Value:       1, 0, 2, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\Restricted
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\everydays
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveGranularity
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Cac
hed Mode\CachedExchangeMode
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\11.0\Word\Securi
ty\Level
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveOld
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\opt
ions\mail\editorpreference
                Value:       0, 0, 2, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\NoDriveTypeAutoRun
                Value:       255, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\NoStartMenuMyGames
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchivePeriod
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\NoWarningNoElevationOnInstall
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaveActive
                Value:       49, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\deleteexpired
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivemount
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\ServerList
                State:       disabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\ArchiveMount
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archivedelete
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaverIsSecure
                Value:       49, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer\Run\1
                Value:       99, 0, 58, 0, 92, 0, 112, 0, 108, 0, 108, 0, 114, 0
, 92, 0, 112, 0, 112, 0, 111, 0, 112, 0, 117, 0, 112, 0, 46, 0, 101, 0, 120, 0,
101, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\promptforaging
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Pre
ferences\DisableManualArchive
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows NT\Printers\Poi
ntAndPrint\TrustedServers
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Opt
ions\Mail\JunkMailTrustOutgoingRecipients
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\SCRNSAVE.EXE
                Value:       67, 0, 58, 0, 92, 0, 87, 0, 105, 0, 110, 0, 100, 0,
 111, 0, 119, 0, 115, 0, 92, 0, 83, 0, 121, 0, 115, 0, 116, 0, 101, 0, 109, 0, 5
1, 0, 50, 0, 92, 0, 115, 0, 115, 0, 84, 0, 101, 0, 120, 0, 116, 0, 51, 0, 100, 0
, 46, 0, 115, 0, 99, 0, 114, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\12.0\Outlook\Cac
hed Mode\Enable
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Office\14.0\outlook\pre
ferences\archiveold
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: User Policy - windows update enable
                KeyName:     Software\Policies\Microsoft\Windows\Control Panel\D
esktop\ScreenSaveTimeOut
                Value:       49, 0, 56, 0, 48, 0, 48, 0, 0, 0
                State:       Enabled

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            GPO: User Policy - windows update enable
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No

        Internet Explorer Connection
        ----------------------------
            HTTP Proxy Server:   N/A
            Secure Proxy Server: N/A
            FTP Proxy Server:    N/A
            Gopher Proxy Server: N/A
            Socks Proxy Server:  N/A
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      No

        Internet Explorer URLs
        ----------------------
            GPO: User Policy - windows update enable
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A

        Internet Explorer Security
        --------------------------
            Always Viewable Sites:     N/A
            Password Override Enabled: False

            GPO: User Policy - windows update enable
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       Yes
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No

        Internet Explorer Programs
        --------------------------
            GPO: User Policy - windows update enable
                Import the current Program Settings: No

C:\Users\dphung>
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 500 total points
ID: 39786394
Windows Update is a *Computer* based policy. The only user based policies are:

"Remove access to use all Windows Update Features"
"Do not adjust default option to 'Install Updates and Shutdown' in shutdown windows dialog box"
"Do not Display 'Install Updates and Shutdown' option in Shut Down Windows dialog box"

Go over

https://support.microsoft.com/kb/2730071

And

especially https://support.microsoft.com/kb/959894

^^^You may have a virus issue ^^^
0
 

Author Comment

by:pllr
ID: 39786864
I ended up having to configure GPO to enable wuauserv,
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SBS 2008 Standard OEL 2 28
Need to disable SSL Cipher 7 69
Locating a GPO setting 3 31
SBS2008 and windows updates 2 14
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question