Automatic Updates options are all grey out for the for all the DCs

Hi, Everyone,

There is a weird thing happened to all the domain controller computers (all
Windows server 2003 std) in our company. I have not noticed when exactly this
started. It seems that the Automatic Updates options at our domain
controllers are grey out. I used to check "Notify me but don't automatically
download or install them" because i don't feel comfortable if i just let the
updates automatically install to the domain controllers. But recently i
noticed the all domain controllers just do the automatic updates and I am
not able to change this settings because all the options at Automatic Updates
(from Control Panel) are grey out.

I checked the default domain group policy, all shows not cofigured for the
windows updates. No other group policy linked to the domain controller OU. It
seems this started to happen when I load some Windows critical updates to the
servers couple of months ago.

Does anyone know how to troubleshoot this or at leasts point me to the
correct direction to check?

Thank you very much for any help from you guys.

John

Hello John,

Did you ever use WSUS or SMS in your environment?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi, Everyone,
>
> There is a weird thing happened to all the domain controller computers
> (all Windows server 2003 std) in our company. I have not noticed when
> exactly this started. It seems that the Automatic Updates options at
> our domain controllers are grey out. I used to check "Notify me but
> don't automatically download or install them" because i don't feel
> comfortable if i just let the updates automatically install to the
> domain controllers. But recently i noticed the all domain controllers
> just do the automatic updates and I am not able to change this
> settings because all the options at Automatic Updates (from Control
> Panel) are grey out.
>
> I checked the default domain group policy, all shows not cofigured for
> the windows updates. No other group policy linked to the domain
> controller OU. It seems this started to happen when I load some
> Windows critical updates to the servers couple of months ago.
>
> Does anyone know how to troubleshoot this or at leasts point me to the
> correct direction to check?
>
> Thank you very much for any help from you guys.
>
> John
>

Yes, we are using WSUS. But none of the domain controllers are included in
the computer groups. And It was working pretty well untill recently I saw DC
automatically downloading and installing windows updates.

It is really weird.

Do you think WSUS could be the reason?

Thank you for your response.

John

"Meinolf Weber" wrote:

> Hello John,
>
> Did you ever use WSUS or SMS in your environment?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hi, Everyone,
> >
> > There is a weird thing happened to all the domain controller computers
> > (all Windows server 2003 std) in our company. I have not noticed when
> > exactly this started. It seems that the Automatic Updates options at
> > our domain controllers are grey out. I used to check "Notify me but
> > don't automatically download or install them" because i don't feel
> > comfortable if i just let the updates automatically install to the
> > domain controllers. But recently i noticed the all domain controllers
> > just do the automatic updates and I am not able to change this
> > settings because all the options at Automatic Updates (from Control
> > Panel) are grey out.
> >
> > I checked the default domain group policy, all shows not cofigured for
> > the windows updates. No other group policy linked to the domain
> > controller OU. It seems this started to happen when I load some
> > Windows critical updates to the servers couple of months ago.
> >
> > Does anyone know how to troubleshoot this or at leasts point me to the
> > correct direction to check?
> >
> > Thank you very much for any help from you guys.
> >
> > John
> >
>
>
>

Hello John,

Check in the computer configuration/administrative templates and also user
configuration/administrative templates if the wuau.adm is added, rightclick
administrative templates, choose add/remove and look for it. And i would
still chekc with gpresult on a dc to check for an update policy, run it with
the verbose switch gpresult /v and check again.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Yes, we are using WSUS. But none of the domain controllers are
> included in the computer groups. And It was working pretty well untill
> recently I saw DC automatically downloading and installing windows
> updates.
>
> It is really weird.
>
> Do you think WSUS could be the reason?
>
> Thank you for your response.
>
> John
>
> "Meinolf Weber" wrote:
>
>> Hello John,
>>
>> Did you ever use WSUS or SMS in your environment?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi, Everyone,
>>>
>>> There is a weird thing happened to all the domain controller
>>> computers (all Windows server 2003 std) in our company. I have not
>>> noticed when exactly this started. It seems that the Automatic
>>> Updates options at our domain controllers are grey out. I used to
>>> check "Notify me but don't automatically download or install them"
>>> because i don't feel comfortable if i just let the updates
>>> automatically install to the domain controllers. But recently i
>>> noticed the all domain controllers just do the automatic updates
>>> and I am not able to change this settings because all the options at
>>> Automatic Updates (from Control Panel) are grey out.
>>>
>>> I checked the default domain group policy, all shows not cofigured
>>> for the windows updates. No other group policy linked to the domain
>>> controller OU. It seems this started to happen when I load some
>>> Windows critical updates to the servers couple of months ago.
>>>
>>> Does anyone know how to troubleshoot this or at leasts point me to
>>> the correct direction to check?
>>>
>>> Thank you very much for any help from you guys.
>>>
>>> John
>>>

Hi, Meinolf,

Thank you very much for your response.

As you suggested, i checked computer configuration/administrative templates
and user configuration/administrative templates and wuau.adm is added in both
templates. I further looked into computer configuration/administrative
templates/Windows Components/windows update and User
Configuration/administrative templates/Windows Components/Windows Update, all
are showing not configured. I also checked with gpresult /v, and i found
nothing. It shows N/A under adminstrative templates at both places. only
default domain controller policy is applied to the Domain Controller OU.

Is there anything I can do further? I assume i should not remove the
wuau.adm from the templates, right? The default domain policy is "blocked
inheritance" at the domain controller OU.

Thank you for your time and suggestion.

John

"Meinolf Weber" wrote:

> Hello John,
>
> Check in the computer configuration/administrative templates and also user
> configuration/administrative templates if the wuau.adm is added, rightclick
> administrative templates, choose add/remove and look for it. And i would
> still chekc with gpresult on a dc to check for an update policy, run it with
> the verbose switch gpresult /v and check again.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Yes, we are using WSUS. But none of the domain controllers are
> > included in the computer groups. And It was working pretty well untill
> > recently I saw DC automatically downloading and installing windows
> > updates.
> >
> > It is really weird.
> >
> > Do you think WSUS could be the reason?
> >
> > Thank you for your response.
> >
> > John
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello John,
> >>
> >> Did you ever use WSUS or SMS in your environment?
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Hi, Everyone,
> >>>
> >>> There is a weird thing happened to all the domain controller
> >>> computers (all Windows server 2003 std) in our company. I have not
> >>> noticed when exactly this started. It seems that the Automatic
> >>> Updates options at our domain controllers are grey out. I used to
> >>> check "Notify me but don't automatically download or install them"
> >>> because i don't feel comfortable if i just let the updates
> >>> automatically install to the domain controllers. But recently i
> >>> noticed the all domain controllers just do the automatic updates
> >>> and I am not able to change this settings because all the options at
> >>> Automatic Updates (from Control Panel) are grey out.
> >>>
> >>> I checked the default domain group policy, all shows not cofigured
> >>> for the windows updates. No other group policy linked to the domain
> >>> controller OU. It seems this started to happen when I load some
> >>> Windows critical updates to the servers couple of months ago.
> >>>
> >>> Does anyone know how to troubleshoot this or at leasts point me to
> >>> the correct direction to check?
> >>>
> >>> Thank you very much for any help from you guys.
> >>>
> >>> John
> >>>
>
>
>

After changing the settings in group policy (I set them back to the default
of 'Not Configured'), restart the Automatic Updates Service (Start > Run >
services.msc <Enter> to bring up the services list). After restarting the
Automatic Updates service, the selected choice should no longer be grayed out
in Control Panel > Automatic Updates.

"John Z" wrote:

> Hi, Meinolf,
>
> Thank you very much for your response.
>
> As you suggested, i checked computer configuration/administrative templates
> and user configuration/administrative templates and wuau.adm is added in both
> templates. I further looked into computer configuration/administrative
> templates/Windows Components/windows update and User
> Configuration/administrative templates/Windows Components/Windows Update, all
> are showing not configured. I also checked with gpresult /v, and i found
> nothing. It shows N/A under adminstrative templates at both places. only
> default domain controller policy is applied to the Domain Controller OU.
>
> Is there anything I can do further? I assume i should not remove the
> wuau.adm from the templates, right? The default domain policy is "blocked
> inheritance" at the domain controller OU.
>
> Thank you for your time and suggestion.
>
> John
>
> "Meinolf Weber" wrote:
>
> > Hello John,
> >
> > Check in the computer configuration/administrative templates and also user
> > configuration/administrative templates if the wuau.adm is added, rightclick
> > administrative templates, choose add/remove and look for it. And i would
> > still chekc with gpresult on a dc to check for an update policy, run it with
> > the verbose switch gpresult /v and check again.
> >
> > Best regards
> >
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >
> > > Yes, we are using WSUS. But none of the domain controllers are
> > > included in the computer groups. And It was working pretty well untill
> > > recently I saw DC automatically downloading and installing windows
> > > updates.
> > >
> > > It is really weird.
> > >
> > > Do you think WSUS could be the reason?
> > >
> > > Thank you for your response.
> > >
> > > John
> > >
> > > "Meinolf Weber" wrote:
> > >
> > >> Hello John,
> > >>
> > >> Did you ever use WSUS or SMS in your environment?
> > >>
> > >> Best regards
> > >>
> > >> Meinolf Weber
> > >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> > >> confers
> > >> no rights.
> > >> ** Please do NOT email, only reply to Newsgroups
> > >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> > >>> Hi, Everyone,
> > >>>
> > >>> There is a weird thing happened to all the domain controller
> > >>> computers (all Windows server 2003 std) in our company. I have not
> > >>> noticed when exactly this started. It seems that the Automatic
> > >>> Updates options at our domain controllers are grey out. I used to
> > >>> check "Notify me but don't automatically download or install them"
> > >>> because i don't feel comfortable if i just let the updates
> > >>> automatically install to the domain controllers. But recently i
> > >>> noticed the all domain controllers just do the automatic updates
> > >>> and I am not able to change this settings because all the options at
> > >>> Automatic Updates (from Control Panel) are grey out.
> > >>>
> > >>> I checked the default domain group policy, all shows not cofigured
> > >>> for the windows updates. No other group policy linked to the domain
> > >>> controller OU. It seems this started to happen when I load some
> > >>> Windows critical updates to the servers couple of months ago.
> > >>>
> > >>> Does anyone know how to troubleshoot this or at leasts point me to
> > >>> the correct direction to check?
> > >>>
> > >>> Thank you very much for any help from you guys.
> > >>>
> > >>> John
> > >>>
> >
> >
> >

Hello John,

Which GPO do you talk about to solve your problem?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> After changing the settings in group policy (I set them back to the
> default of 'Not Configured'), restart the Automatic Updates Service
> (Start > Run > services.msc <Enter> to bring up the services list).
> After restarting the Automatic Updates service, the selected choice
> should no longer be grayed out in Control Panel > Automatic Updates.
>
> "John Z" wrote:
>
>> Hi, Meinolf,
>>
>> Thank you very much for your response.
>>
>> As you suggested, i checked computer configuration/administrative
>> templates and user configuration/administrative templates and
>> wuau.adm is added in both templates. I further looked into computer
>> configuration/administrative templates/Windows Components/windows
>> update and User Configuration/administrative templates/Windows
>> Components/Windows Update, all are showing not configured. I also
>> checked with gpresult /v, and i found nothing. It shows N/A under
>> adminstrative templates at both places. only default domain
>> controller policy is applied to the Domain Controller OU.
>>
>> Is there anything I can do further? I assume i should not remove the
>> wuau.adm from the templates, right? The default domain policy is
>> "blocked inheritance" at the domain controller OU.
>>
>> Thank you for your time and suggestion.
>>
>> John
>>
>> "Meinolf Weber" wrote:
>>
>>> Hello John,
>>>
>>> Check in the computer configuration/administrative templates and
>>> also user configuration/administrative templates if the wuau.adm is
>>> added, rightclick administrative templates, choose add/remove and
>>> look for it. And i would still chekc with gpresult on a dc to check
>>> for an update policy, run it with the verbose switch gpresult /v
>>> and check again.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers
>>> no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Yes, we are using WSUS. But none of the domain controllers are
>>>> included in the computer groups. And It was working pretty well
>>>> untill recently I saw DC automatically downloading and installing
>>>> windows updates.
>>>>
>>>> It is really weird.
>>>>
>>>> Do you think WSUS could be the reason?
>>>>
>>>> Thank you for your response.
>>>>
>>>> John
>>>>
>>>> "Meinolf Weber" wrote:
>>>>
>>>>> Hello John,
>>>>>
>>>>> Did you ever use WSUS or SMS in your environment?
>>>>>
>>>>> Best regards
>>>>>
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>> and
>>>>> confers
>>>>> no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> Hi, Everyone,
>>>>>>
>>>>>> There is a weird thing happened to all the domain controller
>>>>>> computers (all Windows server 2003 std) in our company. I have
>>>>>> not
>>>>>> noticed when exactly this started. It seems that the Automatic
>>>>>> Updates options at our domain controllers are grey out. I used to
>>>>>> check "Notify me but don't automatically download or install
>>>>>> them"
>>>>>> because i don't feel comfortable if i just let the updates
>>>>>> automatically install to the domain controllers. But recently i
>>>>>> noticed the all domain controllers just do the automatic updates
>>>>>> and I am not able to change this settings because all the options
>>>>>> at
>>>>>> Automatic Updates (from Control Panel) are grey out.
>>>>>> I checked the default domain group policy, all shows not
>>>>>> cofigured for the windows updates. No other group policy linked
>>>>>> to the domain controller OU. It seems this started to happen when
>>>>>> I load some Windows critical updates to the servers couple of
>>>>>> months ago.
>>>>>>
>>>>>> Does anyone know how to troubleshoot this or at leasts point me
>>>>>> to the correct direction to check?
>>>>>>
>>>>>> Thank you very much for any help from you guys.
>>>>>>
>>>>>> John
>>>>>>