Forum Discussion

Bryan_Hunt's avatar
Bryan_Hunt
Copper Contributor
Aug 20, 2020

Windows updates for server 2019

Hello,

 

We have a mixture of two 2012 and three 2019 domain controllers in our environment.

 

We have a GPO for domain controllers that is set to download updates and schedule them for installation (and any reboots) for 4am on Saturday mornings. The 2012 DCs follow this GPO, but the 2019 DCs don't. They will install updates and reboot at random times.

 

I did a gpresult to make sure that the GPO was applied and the settings were correct. In looking at the registry of one of the 2019 DCs, all looks to be correct? Registry screen shot below:

 

 

 

Can anyone tell me how to troubleshoot further?

 

Thanks.

 

Bryan Hunt

gpo
updates
windows server 2019

1 Reply

  • Jamony's avatar
    Jamony
    MCT
    Sep 18, 2026

    I would verify the effective Windows Update policy on one of the affected servers rather than only looking at the GPO configuration.

     

    Run:

     

    gpresult /h C:\Temp\UpdatePolicy.html

     

    Then check:

     

    Event Viewer

    → Applications and Services Logs

    → Microsoft

    → Windows

    → WindowsUpdateClient

    → Operational

     

    Look for conflicting settings involving scheduled installation, restart deadlines, active hours and automatic restart.

     

    Also check whether WSUS, Configuration Manager, Azure Update Manager or another management system is applying a separate schedule.

     

    If these are Azure or Azure Arc servers, Azure Update Manager with Maintenance Configurations is a cleaner way to define explicit patching windows and reboot behavior.