Solved

Every hour Windows appears to check for updates

Posted on 2015-02-19
5
273 Views
Last Modified: 2015-03-03
We have a strange one here.

A bunch of servers across a domain appear to be checking for Windows updates every hour. I believe this is causing the systems to spike a little in CPU as it's the only event I can see happening on the hour. (we experience an hourly spike in CPU activity).

The weird thing is, windows update service and windows module installer service have both been disabled, yet this still happens. We've removed all group policies that specify windows update settings and set the servers manually to never check for updates.

Yet, within the Event Viewer, under the WindowsUpdateClient logs, we see events generated every hour that say

Log Name:      Microsoft-Windows-WindowsUpdateClient/Operational
Source:        Microsoft-Windows-WindowsUpdateClient
Date:          19/02/2015 15:01:04
Event ID:      40
Task Category: Windows Update Agent
Level:         Information
Keywords:      Check for Updates
User:          SYSTEM
Computer:     server.domain.local
Description:
An update was detected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
    <EventID>40</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>1</Task>
    <Opcode>17</Opcode>
    <Keywords>0x4000000000000002</Keywords>
    <TimeCreated SystemTime="2015-02-17T15:21:15.175040700Z" />
    <EventRecordID>61197</EventRecordID>
    <Correlation />
    <Execution ProcessID="476" ThreadID="16704" />
    <Channel>Microsoft-Windows-WindowsUpdateClient/Operational</Channel>
    <Computer>SBS.mdcl.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="updateGuid">{0E32A997-25B7-46B6-9AB8-BF93CD0436B7}</Data>
    <Data Name="updateRevisionNumber">200</Data>
  </EventData>
</Event>
0
Comment
Question by:utilize
  • 2
  • 2
5 Comments
 
LVL 69

Expert Comment

by:Merete
ID: 40620453
I believe when there is critical updates windows update runs in the background using as little as possible the resources on the system/s. Everytime the computer is used windows updates pauses till there is no activity then continues until it is fully downloaded then you should see a message update waiting to be installed.
Just my thoughts as I see this occasionally and since I have auto download turned off it only happens with critical updates.
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 40620482
what about the actual local settings for Windows Updates under Control Panel? is the option greyed or set to a particular choice?
0
 

Accepted Solution

by:
utilize earned 0 total points
ID: 40620963
This turned out to be a third party monitoring application (N-ABLE) that was causing this. Disabling the services sorted it out.
0
 

Author Closing Comment

by:utilize
ID: 40641414
Self resolved
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 40641633
good to know the problem has been solved.

it was a pity that the 3rd-party application N-ABLE was not mentioned in the question.
0

Featured Post

Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now