Windows Update appears to be ignoring settings...

[Koldov]

First go at Server 2019...

 

I first noticed that the uptime didn't seem to be reconciled with the last time I knowingly rebooted the server (although I will admit I have rebooted it a lot lately, so could be wrong).

 

Then I noticed it had apparently installed the latest CU all by itself, I did one of the VMs (but was leaving this one until I was sure the first one worked).

 

I don't have much configured by way of GPO to control it, only that it 'should' be set to "Configure automatic updating: 2 - Notify for download and auto install"(and these do appear to be in 'Some settings are managed by your organization - Policies set on your device')...

 

Therefore I'm presuming it should do what the 2012R2 host server does and just let me know there is an update and I can choose what to do with it.

 

But I'm almost 100% sure it has installed the latest CU and rebooted itself! Not what I want at all...

 

Anyone seen this behaviour?

 

Or am I going crazy due to the heat and it being so close to the end of term...?

[Duke5A]

I'm using WSUS to auto install updates on public facing and lower priority servers. The critical stuff like domain controllers get their updates installed manually. These group policies work on 2012R2, 2016 and 2019 servers.

 

 

[Koldov]

Just a quick bump to this thread as it has happened again... not only that but it did it on a 'Preview' and not even a proper update (not what I want on prod servers.)!

 

After a bit if research and reading between the lines, it appears that if you ever do a manual 'search' for updates, it will find them and install them and you can't stop it...

 

From this post:

 

https://community.spiceworks.com/topic/2281814-server-2019-dc-preview-updates-how-to-block#entry-8932658

Edited September 8, 2022 by Koldov