+ Post New Thread
Results 1 to 14 of 14
Windows Server 2008 R2 Thread, Group Policy vs. Windows Update in Technical; Hi folks, We've got a problem with Windows Update settings applied by Group Policy on Windows 7 PCS (with Windows ...
  1. #1
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9

    Question Group Policy vs. Windows Update

    Hi folks,

    We've got a problem with Windows Update settings applied by Group Policy on Windows 7 PCS (with Windows 2008 R2 servers).

    I've followed a couple of guides that are supposed to prevent the "Restart your computer to finish installing important updates", yet it still appears.

    The two purportedly key settings are applied as follows:

    (Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update)
    No auto-restart with logged on users for scheduled automatic updates - Enabled
    Re-prompt for restart with scheduled installations - Enabled and set to 600 minutes

    Just for information there are a bunch of other settings also applied, partly for WSUS, and partly to resolve other related issues:
    Allow non-administrators to receive update notifications - Disabled
    Configure Automatic Updates - Enabled
    Enable client-side targeting - Enabled
    Specify intranet Microsoft update service location - Enabled
    Turn on Software Notifications - Disabled

    I've used RSOP.MSC on a client PC displaying the issue, and that says the group policy in question has been applied and all the settings are there without issue.

    Can anyone identify what setting is incorrect, or needs to be applied to get rid of this nagging dialog?

    TIA

  2. #2

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    310
    Thank Post
    20
    Thanked 80 Times in 68 Posts
    Rep Power
    43
    I had this issue as well, I found I had to also add a user configuration policy for the following:
    Windows Components/Windows Update
    • Remove access to use all Windows Update features Enabled (Configure notifications: 0 - Do not show any notifications)


    And then enable User Group Policy loopback processing mode in the computer configuration policy and set to Merge.

  3. Thanks to Ashm from:

    Gongalong (12th July 2012)

  4. #3
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    Thanks, will give that a try.

  5. #4
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    This is 2008 R2, so it seems loopback no longer exists (possibly).

  6. #5
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,311
    Thank Post
    40
    Thanked 141 Times in 116 Posts
    Rep Power
    53
    Quote Originally Posted by Gongalong View Post
    This is 2008 R2, so it seems loopback no longer exists (possibly).
    It does, we use loopback in 2008 R2 Server for some things.

  7. #6
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    Any ideas where it's hidden? I found an MS article that was appropriate for 2003, but the loopback item didn't seem to exist.

    Wow does GP need a search function.

  8. #7
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,311
    Thank Post
    40
    Thanked 141 Times in 116 Posts
    Rep Power
    53
    Computer Configuration -> Administrative Templates -> System -> Group Policy -> Use Group Policy Loopback Mode

  9. Thanks to Quackers from:

    Gongalong (12th July 2012)

  10. #8
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    Thanks!

  11. #9
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    Curiously turning on loopback caused a script to get processed twice, which in turn caused errors on startup (and confused users), so I've disabled it.

  12. #10

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    310
    Thank Post
    20
    Thanked 80 Times in 68 Posts
    Rep Power
    43
    Do you have any settings other than the WSUS ones configured in that GPO? And do you have it linked to an OU with the computers that you want to target?

    I have a separate WSUS GPO with mainly just the computer settings you specified above and the user loopback set to merge plus the one user setting I mentioned above and it works correctly with no pop ups etc for the logged on user. I would test this with a separate GPO on a test OU and computer to make sure it works as expected.
    Last edited by Ashm; 16th July 2012 at 01:44 PM.

  13. #11
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    The GPOs aren't linked to OUs (a setup I inherited). They are scoped using the security filtering.

    We have GPOs for WSUS Policy, Software Deployment, Teaching Staff, All Users, and All PCs.

  14. #12
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    I set loopback in the All PCs GPO.

  15. #13

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    310
    Thank Post
    20
    Thanked 80 Times in 68 Posts
    Rep Power
    43
    You'd only want to set lookback on the WSUS GPO. Which should only have the following setting in the User Configuration part of that GPO:

    Remove access to use all Windows Update features (Configure notifications: 0 - Do not show any notifications)

  16. #14
    Gongalong's Avatar
    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    868
    Thank Post
    776
    Thanked 17 Times in 15 Posts
    Rep Power
    9
    Ah, I have a feeling that was enabled in one of the user GPOs.

    So I should remove that from the other GPO, enable in the WSUS GPO, and enable loopback?

SHARE:
+ Post New Thread

Similar Threads

  1. group policy for windows 7 clients
    By cheeseslice in forum Windows Server 2008 R2
    Replies: 5
    Last Post: 11th October 2013, 10:37 AM
  2. What’s new with Group Policy in Windows 8
    By Arthur in forum Windows 8
    Replies: 10
    Last Post: 4th November 2011, 01:19 PM
  3. Replies: 0
    Last Post: 31st March 2010, 03:57 PM
  4. Group policy preference problem – Updating files
    By FN-GM in forum Windows Server 2008
    Replies: 7
    Last Post: 2nd April 2009, 08:46 PM
  5. Restrict Mac like Group Policy for Windows
    By DrPerceptron in forum Mac
    Replies: 11
    Last Post: 12th December 2008, 09:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •