utilize
asked on
Every hour Windows appears to check for updates
We have a strange one here.
A bunch of servers across a domain appear to be checking for Windows updates every hour. I believe this is causing the systems to spike a little in CPU as it's the only event I can see happening on the hour. (we experience an hourly spike in CPU activity).
The weird thing is, windows update service and windows module installer service have both been disabled, yet this still happens. We've removed all group policies that specify windows update settings and set the servers manually to never check for updates.
Yet, within the Event Viewer, under the WindowsUpdateClient logs, we see events generated every hour that say
Log Name: Microsoft-Windows-WindowsU
Source: Microsoft-Windows-WindowsU
Date: 19/02/2015 15:01:04
Event ID: 40
Task Category: Windows Update Agent
Level: Information
Keywords: Check for Updates
User: SYSTEM
Computer: server.domain.local
Description:
An update was detected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wi
<EventID>40</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>1</Task>
<Opcode>17</Opcode>
<Keywords>0x40000000000000
<TimeCreated SystemTime="2015-02-17T15:
<EventRecordID>61197</Even
<Correlation />
<Execution ProcessID="476" ThreadID="16704" />
<Channel>Microsoft-Windows
<Computer>SBS.mdcl.local</
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="updateGuid">{0E32A99
<Data Name="updateRevisionNumber
</EventData>
</Event>
A bunch of servers across a domain appear to be checking for Windows updates every hour. I believe this is causing the systems to spike a little in CPU as it's the only event I can see happening on the hour. (we experience an hourly spike in CPU activity).
The weird thing is, windows update service and windows module installer service have both been disabled, yet this still happens. We've removed all group policies that specify windows update settings and set the servers manually to never check for updates.
Yet, within the Event Viewer, under the WindowsUpdateClient logs, we see events generated every hour that say
Log Name: Microsoft-Windows-WindowsU
Source: Microsoft-Windows-WindowsU
Date: 19/02/2015 15:01:04
Event ID: 40
Task Category: Windows Update Agent
Level: Information
Keywords: Check for Updates
User: SYSTEM
Computer: server.domain.local
Description:
An update was detected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wi
<EventID>40</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>1</Task>
<Opcode>17</Opcode>
<Keywords>0x40000000000000
<TimeCreated SystemTime="2015-02-17T15:
<EventRecordID>61197</Even
<Correlation />
<Execution ProcessID="476" ThreadID="16704" />
<Channel>Microsoft-Windows
<Computer>SBS.mdcl.local</
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="updateGuid">{0E32A99
<Data Name="updateRevisionNumber
</EventData>
</Event>
what about the actual local settings for Windows Updates under Control Panel? is the option greyed or set to a particular choice?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Self resolved
good to know the problem has been solved.
it was a pity that the 3rd-party application N-ABLE was not mentioned in the question.
it was a pity that the 3rd-party application N-ABLE was not mentioned in the question.
Just my thoughts as I see this occasionally and since I have auto download turned off it only happens with critical updates.