If the server is a member of a domain, run the Resultant Set of Policies snap-in to see what domain GPOs are applied to your server.
Sincerely, Jeffrey and Mary Jane Harris VIPCS _____ From: Jeff Bunting [mailto:[email protected]] Sent: Monday, December 20, 2010 2:36 PM To: NT System Admin Issues Subject: Re: Windows 2008 autoupdate Let me clarify - only the schedule is grayed out. I am free to change the update settings (which will enable changing the schedule, if I select an auto-install). This is a hosted environment, and I don't have domain credentials to check GPOs for this one, only local admin. If a GPO is setting this, I assume evidence of such would be visible on the local system somewhere? I thought GPO just set the appropriate values in HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate has this changed? (or am I incorrect?) Jeff On Mon, Dec 20, 2010 at 12:53 PM, Kennedy, Jim <[email protected]> wrote: I think it is grayed out because there is a group policy object setting it for you. Double Check your GPO’s. From: Jeff Bunting [mailto:[email protected]] Sent: Monday, December 20, 2010 12:49 PM To: NT System Admin Issues Subject: Windows 2008 autoupdate Had a Win 2008 Enterprise SP2 server update itself and reboot over the weekend. Problem is, as far as I can tell, it is not configured to autoupdate. Windows Update shows "Download updates but let me choose whether to install them". Local security policy shows everything under Windows update as not configured. HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate does not exist. Looking back in the event log, it does appear this was a scheduled event: Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on Sunday, December 19, 2010 at 3:00 AM: - Windows Malicious Software Removal Tool - December 2010 (KB890830) - Cumulative Security Update for Internet Explorer 8 for Windows Server 2008 (KB2416400) - Security Update for Windows Server 2008 (KB2305420) - Update for Windows Server 2008 (KB2443685) - Update for Internet Explorer for Windows Server 2008 (KB2467659) - Security Update for Windows Server 2008 (KB2442962) - Security Update for Windows Server 2008 (KB2423089) - Security Update for Windows Server 2008 (KB2296199) - Security Update for Windows Server 2008 (KB2436673) Beneath "Download updates but let me choose whether to install them" on the Windows update settings it does show Sunday at 3:00 as the scheduled time, but it is grayed out, presumably because it is set to "let me choose whether to install them". Any ideas? Am I looking in the correct places? Jeffrey thanks you all, :-) Jeff ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
