On Fri, Jan 26, 2018 at 9:05 AM, Joseph L. Casale <[email protected]> wrote: > Been a while since I used only wsus, but what does the reboot policy say? > > Computer Configuration/Policies/Administrative Templates/Windows > Components/Windows Update > "No auto-restart..."
No auto-restart with logged on users: Disabled. > >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Michael Leone >> Sent: Friday, January 26, 2018 6:44 AM >> To: [email protected] >> Subject: [NTSysADM] Scheduling updates on a DC via GPO isn't working >> >> I can't tell what I am doing wrong (I'm practically certain it's my >> fault, but I don't know where ... yet). I want to schedule automatic >> updates using WSUS to my domain controllers. So I created new AD >> groups (multiple groups, because I want to stagger the rebooting of >> DCs - I have 6). And I made a series of new GPOs, and set them to >> automatically download and schedule install, all at different hours >> and different days. Filtered them to the new AD groups, linked them to >> the "Domain Controllers" OU. >> >> So one was supposed to happen this morning at 5 AM. Nothing. No reboot. >> >> I check the host, and both "gpresult /r" and rsop.msc are telling me >> the same thing - updates are scheduled to be installed Friday at 5 AM. >> The specific GPO that this DC is supposed to use is actually being >> applied, it says. >> >> And there are 5 important updates waiting, so I know that it checked >> in with WSUS, and found what it should. So it should have done >> *something*. >> >> But no installation today, no reboot. No interesting entries in event >> log. Nothing interesting in windowsupdate log - it says it found 5 >> updates, but nothing about installing the durn things ... >> >> This should work, right? No reason I can't create a GPO to >> automatically install Windows Updates via WSUS, right? >> >
