WSUS Registry Settings

Discussion:

(too old to reply)

unknown

2007-04-09 23:52:47 UTC

I use the following Registry Settings

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://192.168.1.1:8530"
"WUStatusServer"="http://192.168.1.1:8530"
"ElevateNonAdmins"=dword:00000001
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="CPOD"

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AUOptions"=dword:00000004
"AutoInstallMinorUpdate"=dword:00000001
"DetectionFrequency"=dword:00000016
"DetectionFrequencyEnabled"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"RebootRelaunchTimeout"=dword:000002d0
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"RebootWarningTimeoutEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"RescheduleWaitTimeEnabled"=dword:00000001
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000c
"UseWUServer"=dword:00000001

From what I could find on these settings they are supposed to download and
install the patches/hotfixes if approved for installation.
But using these settings requires user interaction to get the install going.
download to PC works

Fred

Winfried Sonntag [MVP]

2007-04-10 06:58:40 UTC

Permalink

Post by unknown
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AUOptions"=dword:00000004
"AutoInstallMinorUpdate"=dword:00000001
"DetectionFrequency"=dword:00000016
"DetectionFrequencyEnabled"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"RebootRelaunchTimeout"=dword:000002d0
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:0000001e
"RebootWarningTimeoutEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"RescheduleWaitTimeEnabled"=dword:00000001
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000c
"UseWUServer"=dword:00000001
From what I could find on these settings they are supposed to download and
install the patches/hotfixes if approved for installation.

"AUOptions"=dword:00000004 is the right setting.

Post by unknown
But using these settings requires user interaction to get the install going.
download to PC works

Are your Users local Administrators?

Winfried

--
http://www.microsoft.com/germany/windowsserver2003/technologien/updateservices/default.mspx
http://www.wsuswiki.com/Home

Hungryjack

2007-04-10 16:18:04 UTC

Permalink

Post by Winfried Sonntag [MVP]

"AUOptions"=dword:00000004 is the right setting.

Post by unknown
But using these settings requires user interaction to get the install going.
download to PC works

Are your Users local Administrators?
Winfried
--
http://www.microsoft.com/germany/windowsserver2003/technologien/updateservices/default.mspx
http://www.wsuswiki.com/Home

Maybe this will help:
NoAutoRebootWithLoggedOnUsers is enabled which Specifies that to complete a
scheduled installation, Automatic Updates will wait for the computer to be
restarted by any user who is logged on, instead of causing the computer to
restart automatically in 5 minutes to complete the installation.
"NoAutoRebootWithLoggedOnUsers"=dword:00000001

If this is set then it will not auto reboot, which means the user has too.

Lawrence Garvin (MVP)

2007-04-10 23:20:56 UTC

Permalink

Post by unknown
From what I could find on these settings they are supposed to download and
install the patches/hotfixes if approved for installation.
But using these settings requires user interaction to get the install
going. download to PC works

After configuring the registry, you'll need to restart the Automatic Updates
service so that it can read the registry settings.

Also, be cautioned against the fact that the update(s) appear in the
notification area and /can/ be installed interactively
and the idea that the scheduled installation is not working.

To determine if the updates were /scheduled/ for installation after
downloading,
review the %windir%\SoftwareDistribution\ReportingEvents.log
or the Event Logs for similar entries confirming the download and
scheduling of the updates.
--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E

Everything you need for WSUS is at
http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx

And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
....

twjolson

2010-06-03 17:59:13 UTC

Permalink

Sorry to Rez a dead thread,

What if you do not want to schedule update installation, but do not wan
the user to be able to configure the installation. I'm looking to hav
as little interaction as possible, preferrably just do a reboot.

Here is what I got thus far :
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"WUServer"="http://10.100.1.38"
"WUStatusServer"="http://10.100.1.38"
"TargetGroup"="22 Hours"
"TargetGroupEnabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AutoInstallMinorUpdates"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
"UseWUServer"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:0000002

--
twjolso
-----------------------------------------------------------------------
twjolson's Profile: http://forums.techarena.in/members/228126.ht
View this thread: http://forums.techarena.in/server-update-service/722434.ht

http://forums.techarena.i

Harry Johnston [MVP]

2010-06-04 01:08:12 UTC

Permalink

What if you do not want to schedule update installation, but do not want
the user to be able to configure the installation. I'm looking to have
as little interaction as possible, preferrably just do a reboot.

How were you wanting to install the updates? Using the "install updates and
shut down" option?

Which operating system?

Harry.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000000
"WUServer"="http://10.100.1.38"
"WUStatusServer"="http://10.100.1.38"
"TargetGroup"="22 Hours"
"TargetGroupEnabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AutoInstallMinorUpdates"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
"UseWUServer"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000022

--
Harry Johnston
http://harryjohnston.wordpress.com