Windows 10 Updates

CHI-LTD
CHI-LTD used Ask the Experts™
on
Hi
We having issues with machines prompting to restart post install of WSUS updates.
I compared two machine which had the same updates, one restarted automatically at the time notified on scree, the other hasn't restarted yet.

We are using deadlines in WSUS and GPO.

I see the creator update may resolve this?

If not is there way to stop the updates forcing restart?

Thanks

Such a poo OS
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018
Commented:
Deadlines do enforce restarts.
Technical Advisor
Commented:
Rajul RajInformation Security Officer
Commented:
Disable Forced Restarts With a Registry tweak.

1. First, you’ll need to open the Registry Editor. Press Windows Key + R to open the Run dialog, type regedit into it, and press Enter.

2. When the registry editor appears, navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU registry key

3. You’ll likely find that the last two parts of the key — the WindowsUpdate\AU parts — don’t yet exist. You’ll need to create them yourself.
To do so, right-click the Windows key, point to New, and select Key. Type WindowsUpdate and press Enter. Then, right-click the WindowsUpdate key, point to New, and select Key. Type AU and press Enter. This will create the correct registry key structure.

4. With the AU key selected in the left pane, right-click in the right pane, point to New, and select DWORD (32-bit) value. Type NoAutoRebootWithLoggedOnUsers and press Enter to name the new value.

5. Double-click the value you just created and type 1 into its value data box. You can then click OK — you’re done in the registry.

6. You can now reboot your computer and your policy changes will take effect. However, you probably don’t want to reboot your computer! Luckily, you can make these changes take effect without rebooting

7. First, open a Command Prompt window as Administrator. On Windows 8, press Windows Key + X and select Command Prompt (Admin). On Windows 7, open the Start menu, search for Command Prompt, right-click the Command Prompt shortcut, and select Run as Administrator.

8. Run the following command to make your changes take effect immediately:

gpupdate /force

Open in new window

Announcing the Winners!

The results are in for the 15th Annual Expert Awards! Congratulations to the winners, and thank you to everyone who participated in the nominations. We are so grateful for the valuable contributions experts make on a daily basis. Click to read more about this year’s recipients!

Rajul RajInformation Security Officer

Commented:
Disable Forced Restarts With Group Policy

1.  First, open the Local Group Policy Editor. Press Windows Key + R to open the Run dialog, type gpedit.msc into the dialog box, and press Enter to open it.

2. Navigate to the following folder in the left pane: Computer Configuration\Administrator Templates\Windows Components\Windows Update

3. In the right pane, double-click the “No auto-restart with logged on users for scheduled automatic update installations” setting. Set the setting to Enabled and click OK.

4. After changing this setting, either reboot your computer or run the
gpupdate /force 

Open in new window

command in the way we mentioned above.

Author

Commented:
@ Rajul Raj
Does this overwrite the deadlines?
Distinguished Expert 2018
Commented:
No, deadlines rule, no other settings will prevent automatic restarts if you use deadlines.

Author

Commented:
Sorry we have this enabled already
Distinguished Expert 2018

Commented:
So what? You don't have to use it and you can disable it again.

Author

Commented:
So our WSUS client policy has deadline of 2 weeks and 19:00 hours.  Does this mean that any updates not installed/pending by this time requires a reboot?

Author

Commented:
We have this in place already (was posted after you replied):

2. Navigate to the following folder in the left pane: Computer Configuration\Administrator Templates\Windows Components\Windows Update

3. In the right pane, double-click the “No auto-restart with logged on users for scheduled automatic update installations” setting. Set the setting to Enabled and click OK.

I get it that deadlines are king.  There must be a way to stop this?  As i say one machine restarted the other didn't.  Both had same updates installed, same prompt, both closed close to the massage..
Distinguished Expert 2018

Commented:
"I get it that deadlines are king.  There must be a way to stop this?" - There is a way: don't use deadlines. Deadlines are only useful, if you want to make sure, that certain updates get installed by a defined time, no matter what. Is that the reason why you use deadlines?

Author

Commented:
At what point does a deadline restart a machine?
Distinguished Expert 2018

Commented:
If you set deadline: march 30, 9 o' clock, we'll see the machines install the update at 9 and reboot immediately afterwards. If the machine is not on on march 30, it will install the updates at the next startup and immediately reboot.

Author

Commented:
ok
we have changed the GOP for option 3 and adding maintenance window.  Removing deadline from wsus policy also.
Distinguished Expert 2018

Commented:
Please close the question or give feedback.

Author

Commented:
we've ensured machines restart outside of working hours now and removed deadlines.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial