Managing Windows Updates

[dazza007]

Hi

I just wanted to scope how people manage releasing Windows updates to clients on site.

Our site has WSUS to install all what Microsoft release as critical updates, definition updates, security updates and update rollups to be pushed out on Patch Tuesday to the client machines.

I have noticed that some machines are out of action during lesson time for 10-15 minutes when the computer is restarted by a user. Machines onsite are not restarted, but go to sleep overnight.

What is the best way that I can manage the windows updates being release and installed on client machines to prevent downtime during lessons.

Thanks

Darren

[themightymrp]

You should have a GPO which is pushing out your WSUS server settings. In the GPO, go to Computer --> Policies --> Admin Templates --> Windows Components --> Windows Updates.

 

Configure the setting "Configure Automatic Updates". Set updating to option 4 (Auto download and schedule the install). I have mine set to everyday and a time of 4pm. Obviously you can adjust this to suit There are options for forcing restarts etc too

[gshaw]

Wake on LAN during the night is the least disruptive, other than that we've tried putting ours to install at shut down without the fixed time schedule.

[dazza007]

Here is our policy

My first thought is to change and test the setting.

Allow Automatic Updates immediate installation Enabled to Disabled

This is the only setting that looks suspect in our WSUS policy

MS explaination is

This policy specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows.If the status is set to Enabled, Automatic Updates will immediately install these updates after they have been downloaded and are ready to install.

If the status is set to Disabled, such updates will not be installed immediately.

 

 

The issues causing disruption is when users restart the client, a quick review shows that the installation will download and schedule installation at 3 o clock with a 15 minute delay.

 

I am starting to get a grip on the WSUS GPO, however how do I stop installation of the update on restart during lessons?

 

 

 

Computer Configuration (Enabled)hide

Policieshide

Administrative Templateshide

Policy definitions (ADMX files) retrieved from the local machine.Windows Components/Windows Update

Policy Setting Comment

Allow Automatic Updates immediate installation Enabled

Allow non-administrators to receive update notifications Disabled

Automatic Updates detection frequency Enabled

Check for updates at the following

interval (hours): 2

 

Policy Setting Comment

Configure Automatic Updates Enabled

Configure automatic updating: 4 - Auto download and schedule the install

The following settings are only required

and applicable if 4 is selected.

Scheduled install day: 0 - Every day

Scheduled install time: 15:00

 

Policy Setting Comment

Delay Restart for scheduled installations Enabled

Wait the following period before

proceeding with a scheduled

restart (minutes): 15

 

Policy Setting Comment

No auto-restart with logged on users for scheduled automatic updates installations Enabled

Re-prompt for restart with scheduled installations Enabled

Wait the following period before

prompting again with a scheduled

restart (minutes): 60

 

Policy Setting Comment

Reschedule Automatic Updates scheduled installations Enabled

Wait after system

startup (minutes): 30

 

Policy Setting Comment

Specify intranet Microsoft update service location Enabled

Set the intranet update service for detecting updates:

Set the intranet statistics server:

(example: http://IntranetUpd01)