WSUS Registry Settings

[pushpendra]

Sponsored Links

I am using the below Registry Settings to download and install the patches/hotfixes if approved for installation. However, using these settings requires user interaction to get the install to start and download to computer, check the below settings:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://192.168.1.1:8530"
"WUStatusServer"="http://192.168.1.1:8530"
"ElevateNonAdmins"=dword:00000001
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="CPOD"

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AUOptions"=dword:00000004
"AutoInstallMinorUpdate"=dword:00000001
"DetectionFrequency"=dword:00000016
"DetectionFrequencyEnabled"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"RebootRelaunchTimeout"=dword:000002d0
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"RebootWarningTimeoutEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"RescheduleWaitTimeEnabled"=dword:00000001
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000c
"UseWUServer"=dword:00000001

[troy]

Are you by any chance Users Local Administrators, I think that maybe this will help, check to see if NoAutoRebootWithLoggedOnUsers is enabled that specifies for a complete scheduled installation and then automatic updates will wait for pc to be restarted by any user who is logged on, instead of causing the computer to restart automatically in 5 minutes to complete the installation.

"NoAutoRebootWithLoggedOnUsers"=dword:00000001

If the above is set then it will not auto reboot, which means the user has too.

[twjolson]

What if you do not want to schedule update installation, but do not want the user to be able to configure the installation. I'm looking to have as little interaction as possible, preferrably just do a reboot.

Here is what I got thus far :
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"WUServer"="http://10.100.1.38"
"WUStatusServer"="http://10.100.1.38"
"TargetGroup"="22 Hours"
"TargetGroupEnabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AutoInstallMinorUpdates"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
"UseWUServer"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000022