Solved

Windows 10 & WSUS

Posted on 2016-09-26
24
42 Views
Last Modified: 2016-10-17
Am i right in saying that Win10 doesn't install updates automatically via WSUS like Win7 does currently?
As per: https://social.technet.microsoft.com/Forums/en-US/8a416aa0-4ea6-49d1-bc02-9fee7736c2c7/wsus-and-windows-10-apply-updates-automtically?forum=winserverwsus
0
Comment
Question by:CHI-LTD
  • 8
  • 7
  • 5
  • +2
24 Comments
 
LVL 9

Expert Comment

by:Muhammad Mulla
ID: 41816046
Hi

With our settings, we have it auto download and schedule install, but it does not install. So yes, you are right, unless there are other settings that will make it auto install.
0
 
LVL 12

Expert Comment

by:Sandeep
ID: 41816091
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41816094
So we still have to manually install via Windows Update settings?
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41816097
and need 2012 r2 WSUS for WIN10?
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41816103
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41816106
Starting with windows 8, MS makes it harder for admins to control when their workstations install and restart. MS introduced a so-called "maintenance window" and that together with the option to do fast booting (shutdown=kernel hibernation), had this effect that you see.

Anyway, there still is a way to make it feel like you are on 7: do use deadlines. Update deadlines are configurable right at the WSUS, per update or even globally (as an auto-approve-option). Deadline september 25th would mean, If I start my computer on the 26th, the update will be installed right away and a restart will be enforced. Before the 25th however, the behavior is not changed.
So if you wanted newly approved updates to install as soon as possible, set the deadline to the same day.
0
 
LVL 9

Expert Comment

by:Muhammad Mulla
ID: 41816154
You won't necessarily have to manually update using windows update, as it should still change the power options to 'Update and Restart' and 'Update and Shutdown'.

As above, you can also set the updates to have a deadline. It's probably easiest to create a new update view and then multiple select > right-click and Approve... > on the drop down for the computer group that you want, you should be able to set a deadline.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41816181
"as it should still change the power options to 'Update and Restart' and 'Update and Shutdown'." - No, not quite. Unfortunately, it only changes to "update and restart", which is not what users will like to choose. "Update and shutdown" is seen ONLY after the updates have been already installed in the background. This behavior has also changed with win8 already.
1
 
LVL 9

Expert Comment

by:Muhammad Mulla
ID: 41816217
My mistake. I also noticed that setting a deadline for multiple updates doesn't seem to be possible on updates that are already approved.

You will need to reapprove updates, and then, without clicking ok on the approval window set a deadline.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41816224
"setting a deadline for multiple updates doesn't seem to be possible either" - it is possible, using the option I described: auto-approvals.
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41816338
Is it worth waiting for next version of windows pro?
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41816362
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 53

Expert Comment

by:McKnife
ID: 41816378
Why do you link this thread? The reason for the behavior has been mentioned, also the solution: deadlines. "The next version of windows pro" - now what should that mean? Windows 10 does not seem to be getting a successor in the near future. instead, MS will try and improve it about twice a year with feature updates. If they will address windows update? Who knows. Best would be to use the feedback app and tell them.
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41817617
You can use task scheduler to run a VBS script that forces the pending updates installation at a specific time of each day or selected week days, or use the same script as startup script on the domain, thus you will get all your LAN computers updated.
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41817631
Can you share the script?
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41817633
We can use scripts, anytime, but how do we handle restarts? That is the problem.
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41817669
ah yes, i dont want that.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41817682
If we use a script, please test: will the user have the option to shutdown, or only to "update and shutdown"? I am not sure at the moment.
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41818635
With the script you can Reboot inmediately, or no reboot at all. Tomorrow will publish an Article about that Script.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41818732
If the user chooses not to reboot, windows will enforce a reboot after three days - back to square one.
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41819509
In that case, you must communicate to the users the approved policy for reboots,  it could be at midnight every day, or a day in the week. To reboot the computer is an unavoidable step in the windows update process.
0
 
LVL 7

Accepted Solution

by:
Hector2016 earned 500 total points (awarded by participants)
ID: 41819654
Here is my script to force the updates installation.
If you want to avoid the reboot part call the script with /nr option.

On Error Resume Next
WScript.StdOut.Write "*****************************************************************" & vbCrLf
WScript.StdOut.Write "***         Forced install of all pending updates             ***" & vbCrLf
WScript.StdOut.Write "*****************************************************************" & vbCrLf 
WScript.StdOut.Write "**                    How to use this script                   **" & vbCrLf
WScript.StdOut.Write "*****************************************************************" & vbCrLf
WScript.StdOut.Write "** cscript DoUpdate.vbs [/nr]                                  **" & vbCrLf
WScript.StdOut.Write "**                                                             **" & vbCrLf
WScript.StdOut.Write "** [/nr]      Never reboot (default is to reboot if needed)    **" & vbCrLf
WScript.StdOut.Write "*****************************************************************" & vbCrLf
' See if can auto-reboot.
DoReboot = True
if WScript.Arguments.Count <> 0 then
  for i = 0 to WScript.Arguments.Count - 1
    strInput1 = Lcase(Trim(WScript.Arguments(i)))
	
	if (strInput1 = "/nr") then
      DoReboot = False	'Do not reboot even if it is necessary.
    end if	
	
  next
end if
'*******************************************************************
' Create needed objects.
'*******************************************************************
Set updateSession = CreateObject("Microsoft.Update.Session")
Set updateSearcher	 = updateSession.CreateUpdateSearcher()
Set updateDownloader = updateSession.CreateUpdateDownloader()
Set updateInstaller  = updateSession.CreateUpdateInstaller()

Set ComputerStatus 	= CreateObject("Microsoft.Update.SystemInfo")
Set objShell = CreateObject("WScript.Shell")

' Step 1: Verify if there is a pending reboot, if so: reboot right now.
If ComputerStatus.RebootRequired then 
  WScript.StdOut.Write "This computer needs to reboot before start searching for updates." & vbCrLf
  if DoReboot then
    WScript.StdOut.Write "Rebooting in 5 seconds." & vbCrLf
    strErrorCode = objShell.Run("shutdown.exe -r -f -t 05",0,True)
  end if
  WScript.Sleep 3000
  WScript.Quit 1
End if

' Step 2: Search for updates.
WScript.StdOut.Write "Wait while searching updates." & vbCrLf
Set updateSearch = updateSearcher.Search("IsInstalled=0")
If updateSearch.ResultCode <> 2 Then
  WScript.StdOut.Write "Searching has failed with error code: " & updateSearch.ResultCode & vbCrLf
  WScript.Sleep 3000
  WScript.Quit 1
End If
' Step 3: If there is any new updates download them all.
If updateSearch.Updates.Count = 0 Then
  WScript.StdOut.Write "No new updates. Finishing in 3 seconds." & vbCrLf
  WScript.Sleep 3000
  WScript.Quit 2
End If

WScript.StdOut.Write "Wait while downloading " & updateSearch.Updates.Count & " update(s)." & vbCrLf

updateDownloader.Updates = updateSearch.Updates
Set downloadResult = updateDownloader.Download()
If downloadResult.ResultCode <> 2 Then
  WScript.StdOut.Write "The download has failed with error code: " & downloadResult.ResultCode & vbCrLf
  WScript.Sleep 3000
  WScript.Quit 1
End If
WScript.StdOut.Write "Download completed." & vbCrLf
' Step 4: Install all downloaded updates.
WScript.StdOut.Write "Installing updates ..." & vbCrLf
updateInstaller.Updates = updateSearch.Updates
Set installationResult = updateInstaller.Install()
If installationResult.ResultCode <> 2 Then
  WScript.StdOut.Write "The installation has failed with error code: " & installationResult.ResultCode & vbCrLf
  WScript.Sleep 3000
  WScript.Quit 1
End If
' Step 5: Reboot if its needed.
If ComputerStatus.RebootRequired then 
  WScript.StdOut.Write "This computer needs to reboot to complete the installation." & vbCrLf
  if DoReboot then
    WScript.StdOut.Write "Rebooting in 5 seconds." & vbCrLf
    strErrorCode = objShell.Run("shutdown.exe -r -f -t 05",0,True)
  end if
  WScript.Sleep 3000
  WScript.Quit 1
  Else
  WScript.StdOut.Write "Script completed." & vbCrLf
  WScript.Sleep 3000
  WScript.Quit 2
End if
 

Open in new window

0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 41840343
my testing so far has shown that clients are getting a prompt asking them to update windows!
0
 
LVL 7

Expert Comment

by:Hector2016
ID: 41846311
No more arguments.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now