Windows 11 automatically restarting after install security Update — With GPO and WSUS.
Hi everyone, I’m facing a strange behavior with Windows 11 devices that receive updates through WSUS and are fully managed via Group Policy. Here’s the scenario: We have a GPO configured as follows: -Configure Automatic Updates → 4 (Auto download and schedule the install) -Scheduled installation every day at 10:00 -Install during automatic maintenance → disabled -Active Hours configured -Turn off auto-restart for updates during active hours → Enabled -Update deadlines set to 0 (to avoid any forced restart) -No other restart-related policies set in the domain Even with this configuration, after updates are installed, Windows 11 shows the following message: “Your organization manages update settings. We will restart and install this update at X minutes.” And then the device automatically restarts, even when: -a user is logged in -it is outside Active Hours -deadlines are disabled -no-auto-restart is enabled This behavior does not happen on Windows 10 — only on Windows 11.
Automatic installation of definition updates
Hi, we use a Windows 2022 environment with a WSUS server. I want to configure WSUS/GPOs in that way that defintion updates, which do not require a reboot will be installed automatically. The normal updates, even if they are permited by wsus, should only be installed when i start the installation at the specific computer/server. Is this/How is this possible? Greetings JensUnexpected Automatic Windows Server Updates Despite GPO and WSUS Configurations
Hello everyone, I am experiencing a disruptive issue across a number of our Windows servers (ranging from Server 2012 to Server 2022). Despite a carefully managed WSUS implementation and GPO enforcement for Windows Updates, we have been facing an issue where several updates are getting automatically installed on these servers. The problem is, these updates are not ones we have explicitly approved, nor are they manually triggered for download/installation. The automatic reboots following these installations are causing significant service disruptions. Furthermore, the behavior seems to be somewhat random, which makes it even more challenging to root cause. Here is a summary of the GPO and WSUS configurations, and what I have verified so far: The GPO for Windows Updates is configured to '4 - Auto download and schedule the install'. The RSOP confirmed that there are no conflicting GPOs. WSUS is functioning correctly and the automatic approval of updates has been disabled. Dual Scan is not a factor as it's not relevant to the Windows Server versions we're using. It has been confirmed that the updates in question are indeed WSUS updates, but they haven’t been approved by us. The issue does not pertain to pre-downloaded update files or Service Stack Updates (SSUs). Given the above points, I am having a hard time figuring out why these updates are being installed and causing unplanned reboots. I would really appreciate it if anyone who has encountered a similar issue or anyone with insights could shed some light on this. Thank you in advance for your assistance! Best
Installing Report Viewer 2012 Runtime
Hello, I have WSUS installed on Windows Server Standard 2019 (x64), so I'm trying to get access to some reports but the system is asking me for the Report Viewer 2012. When I launch the installer I got this message: Any clue where can I get it, because from MS I can't get it. Thank you guys,WSUS - Why Windows target version GPO / registry setting is not working?
Hi, I would like to set my Windows 10 PC's target version to 22H2 and disable Windows 11 upgrade. I set a GPO to disable the upgrade, but it is not working, my test PC's still get the Windows 11 upgrade (and it fails with unsupported processor error). The registry settings set correctly on the Windows 10 PC, but it is still try to get the update from my WSUS server. What do I miss? How could I tell these PC's to not try this update? According to https://answers.microsoft.com/en-us/windows/forum/all/how-to-stop-or-block-windows-11-update/9f271456-51dd-4716-b69d-0834d552ca83, I did everything correctly, but still I face this problem.
WSUS PS sync script
Hello, We are trying to build a powershell script which will be executed on any client which should be able to search/install windows updates from a wsus server which resides in our network but it is not the default option in the clients configuration. The severs are configured with let's say wsus server X and we are trying to sync with wsus server Z and very important, we should not modify the client configuration. We tried to find a module/option to achive what we described without any luck. Did anyone tried something similar ? if yes, any hints ?Problems with updates reports
Hi everyone. I have a problem with WSUS reports. Recently I update my Windows Server 2022 and that is my WSUS Server. After that, I can´t generate reports of my computers and updates, the console simply quit with no errors. In my Event Viewer I can see this: When I uninstall the “Update for Microsoft Windows (KB5034613)”, the reports work again but I want to now if anyone had the same problem.
Patching Windows Server
Scenario: 2 x on-prem DCs (VMs), in the Default DCs OU in AD GPO applied to the OU to control updaging via WSUS Two Azure DCs are added - which also automatically go into the same OU when they are promoted to DCs Azure DCs have a patching policy applied through Azure Which patching method will take predecence on the Azure DCs - the Azure method, or WSUS? Thanks
Windows Server using WSUS with no internet connected
Hi, I have some Windows Server 2019 is no internet access and configed to get updates via WSUS by GPO. But I haven't seen it communicated with WSUS in schedule. I checked WindowsUdpateLog on it, it connected to Microsoft Update SLS with fail becuase I configed it is no internet access and it haven't connect to WSUS. Currently, I need to check updates by manually using sconfig. How to config GPO is correctly with WSUS if the Windows Server is no internet access?WSUS - Howto view Update Metadata and Applicabilty Rules
I use WSUS to patch my Windows estate and Solarwinds Patch manager to add 3rd party patches. How can I see the metadata (applicability rules etc.) for an arbitrary update published in WSUS? I have an issue with some patches showing as 'Not Applicable' and I wish to see the rules/logic they are using.
