Avatar of Hector2016
Hector2016
 asked on

Problem scheduling the installation of windows updates.

Hello everyone,

I have a WSUS server and a Domain with 500 client computers. Client are using Windows 7.
On the domain I set a policy to schedule windows updates installation, but is happening something odd: Each time a client connects to the wsus server it schedule the installation for 3 AM of the next day. I want to make it work without using deadlines to avoid the forced restart issue, and I want that all clients automatically install the updates.
Any idea of what could be the cause of this behavior?

This is the policy configuration:

MyPolicy.png
Windows 7Active DirectoryOperating SystemsWindows OSWSUS

Avatar of undefined
Last Comment
Hector2016

8/22/2022 - Mon
arnold

When do you want it to install?
You have an option there to install immediately, but it only applies to some updates that include references from MS that it will not impact the system /operation or ,.....

This is the normal behavior:
Client checks in with wsus to see which updates are available and which are approved for install. The client downloads and schedules their installation based on the GPO. If it misses (Off during 3:00 am), it will do the updated when the system is turned bd you gave the missed install window....
David Johnson, CD

the machines have to be on at 3AM perhaps you could change it to the end of the workday i.e. 5PM
arnold

There is a setting that it will install the updates the following morning when the scheduled install missed.
You have to set the window large enough I have it set to 8 hours (meaning as long as the system is booted by 11am the following morning, the updates will be installed at tat time)

I've seen times where people scheduled for mid day/end of shift, the problem is that a user might "turn off" (HARD OFF) their system on their way out ......
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
David Johnson, CD

The only way around a hard turn off is to use Wake On Lan to start the machines.
arnold

David, the hard turnoff is a reason why one should not schedule the install near the end of the business day.
I.e. The install began, 5:15 pm the user hard powers off the system. The system might not come up.

The delayed install provides the scheduled update install event was missed it will be installed immediately when the system boots.

Windows 7 and newer are in stages, install, complete install process on boot. Or the user has the install updates and shutdown.......
Hector2016

ASKER
@arnold

There is no missed install window on any client. As the policy is automatically re-applied at boot time, the WSUS client reset the schedule to the next day at 3:00 AM. That is the problem!
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
ASKER CERTIFIED SOLUTION
David Johnson, CD

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Hector2016

ASKER
@David

Do you know what tool is best to schedule the WOL for all computers?
David Johnson, CD

http://www.nirsoft.net/utils/wake_on_lan.html works fine but remember that WOL must be enabled in the computers bios and network adapter.
Hector2016

ASKER
@David

I will try the WOL solution and tell you after.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
arnold

Some computers have the BIOS configurable start up time.
Hector2016

ASKER
Using WOL is the best option in practice, since the offices are widely dispersed. Once WOL is enabled in the BIOS, I will have the opportunity to activate them when needed, not only at a specific time.