Windows 10 Updates

Hi
We having issues with machines prompting to restart post install of WSUS updates.
I compared two machine which had the same updates, one restarted automatically at the time notified on scree, the other hasn't restarted yet.

We are using deadlines in WSUS and GPO.

I see the creator update may resolve this?

If not is there way to stop the updates forcing restart?

Thanks

Such a poo OS
LVL 1
CHI-LTDAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Deadlines do enforce restarts.
0
RaminTechnical AdvisorCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Rajul RajInformation Security OfficerCommented:
Disable Forced Restarts With a Registry tweak.

1. First, you’ll need to open the Registry Editor. Press Windows Key + R to open the Run dialog, type regedit into it, and press Enter.

2. When the registry editor appears, navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU registry key

3. You’ll likely find that the last two parts of the key — the WindowsUpdate\AU parts — don’t yet exist. You’ll need to create them yourself.
To do so, right-click the Windows key, point to New, and select Key. Type WindowsUpdate and press Enter. Then, right-click the WindowsUpdate key, point to New, and select Key. Type AU and press Enter. This will create the correct registry key structure.

4. With the AU key selected in the left pane, right-click in the right pane, point to New, and select DWORD (32-bit) value. Type NoAutoRebootWithLoggedOnUsers and press Enter to name the new value.

5. Double-click the value you just created and type 1 into its value data box. You can then click OK — you’re done in the registry.

6. You can now reboot your computer and your policy changes will take effect. However, you probably don’t want to reboot your computer! Luckily, you can make these changes take effect without rebooting

7. First, open a Command Prompt window as Administrator. On Windows 8, press Windows Key + X and select Command Prompt (Admin). On Windows 7, open the Start menu, search for Command Prompt, right-click the Command Prompt shortcut, and select Run as Administrator.

8. Run the following command to make your changes take effect immediately:

gpupdate /force

Open in new window

0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Rajul RajInformation Security OfficerCommented:
Disable Forced Restarts With Group Policy

1.  First, open the Local Group Policy Editor. Press Windows Key + R to open the Run dialog, type gpedit.msc into the dialog box, and press Enter to open it.

2. Navigate to the following folder in the left pane: Computer Configuration\Administrator Templates\Windows Components\Windows Update

3. In the right pane, double-click the “No auto-restart with logged on users for scheduled automatic update installations” setting. Set the setting to Enabled and click OK.

4. After changing this setting, either reboot your computer or run the
gpupdate /force 

Open in new window

command in the way we mentioned above.
0
CHI-LTDAuthor Commented:
@ Rajul Raj
Does this overwrite the deadlines?
0
McKnifeCommented:
No, deadlines rule, no other settings will prevent automatic restarts if you use deadlines.
1
CHI-LTDAuthor Commented:
Sorry we have this enabled already
0
McKnifeCommented:
So what? You don't have to use it and you can disable it again.
0
CHI-LTDAuthor Commented:
So our WSUS client policy has deadline of 2 weeks and 19:00 hours.  Does this mean that any updates not installed/pending by this time requires a reboot?
0
CHI-LTDAuthor Commented:
We have this in place already (was posted after you replied):

2. Navigate to the following folder in the left pane: Computer Configuration\Administrator Templates\Windows Components\Windows Update

3. In the right pane, double-click the “No auto-restart with logged on users for scheduled automatic update installations” setting. Set the setting to Enabled and click OK.

I get it that deadlines are king.  There must be a way to stop this?  As i say one machine restarted the other didn't.  Both had same updates installed, same prompt, both closed close to the massage..
0
McKnifeCommented:
"I get it that deadlines are king.  There must be a way to stop this?" - There is a way: don't use deadlines. Deadlines are only useful, if you want to make sure, that certain updates get installed by a defined time, no matter what. Is that the reason why you use deadlines?
1
CHI-LTDAuthor Commented:
At what point does a deadline restart a machine?
0
McKnifeCommented:
If you set deadline: march 30, 9 o' clock, we'll see the machines install the update at 9 and reboot immediately afterwards. If the machine is not on on march 30, it will install the updates at the next startup and immediately reboot.
0
CHI-LTDAuthor Commented:
ok
we have changed the GOP for option 3 and adding maintenance window.  Removing deadline from wsus policy also.
0
McKnifeCommented:
Please close the question or give feedback.
0
CHI-LTDAuthor Commented:
we've ensured machines restart outside of working hours now and removed deadlines.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.