Group Policy - Don't prompt users to install or reboot

I am using group policies to manage Windows Updates via WSUS. Everything
works fine, but I am trying to prevent the WU client from prompting users to
install updates that I have approved via WSUS. I want the updates to simply
install in the background. This seemed to work when I disabled the policy
item "allow non-administrators to receive update notifications." However,
this seemed to have the unintended result of not allowing a user to postpone
a required reboot of their system. I don't mind if the users are prompted
for a reboot, but I need to allow them to click 'restart later' if they are
in the middle of a task. Is there a way to meet both needs?
Thanks,
Joe

There a several Group Policy settings that you can use along with WSUS, In
your case I would suggest, and only if you are completly sure that the
updates you are approving will work in production, that you use the
auto-restart after updates are installed setting... that way you could set
the updating machines to restart sometime over night when noone is at the pc.
Also, use the setting to re-schedule installations that were not able to
install over night for the next scheduled installation which would be what
ever time you set the policy to. Here is a link to some GPO settings used
with WSUS. Also if you go to WSUS homepage you can download a white paper
that will have all of the GPO settings most all implementations of WSUS use.

http://technet2.microsoft.com/Window....mspx?mfr=true

Goodluck...
--
CipherTeKST
MCSE: Security 2003, CCNA, Security+


"Joe" wrote:

> I am using group policies to manage Windows Updates via WSUS. Everything
> works fine, but I am trying to prevent the WU client from prompting users to
> install updates that I have approved via WSUS. I want the updates to simply
> install in the background. This seemed to work when I disabled the policy
> item "allow non-administrators to receive update notifications." However,
> this seemed to have the unintended result of not allowing a user to postpone
> a required reboot of their system. I don't mind if the users are prompted
> for a reboot, but I need to allow them to click 'restart later' if they are
> in the middle of a task. Is there a way to meet both needs?
> Thanks,
> Joe

Thanks! I'll take a look.
Joe

"CipherTeKST" wrote:

> There a several Group Policy settings that you can use along with WSUS, In
> your case I would suggest, and only if you are completly sure that the
> updates you are approving will work in production, that you use the
> auto-restart after updates are installed setting... that way you could set
> the updating machines to restart sometime over night when noone is at the pc.
> Also, use the setting to re-schedule installations that were not able to
> install over night for the next scheduled installation which would be what
> ever time you set the policy to. Here is a link to some GPO settings used
> with WSUS. Also if you go to WSUS homepage you can download a white paper
> that will have all of the GPO settings most all implementations of WSUS use.
>
> http://technet2.microsoft.com/Window....mspx?mfr=true
>
> Goodluck...
> --
> CipherTeKST
> MCSE: Security 2003, CCNA, Security+
>
>
> "Joe" wrote:
>
> > I am using group policies to manage Windows Updates via WSUS. Everything
> > works fine, but I am trying to prevent the WU client from prompting users to
> > install updates that I have approved via WSUS. I want the updates to simply
> > install in the background. This seemed to work when I disabled the policy
> > item "allow non-administrators to receive update notifications." However,
> > this seemed to have the unintended result of not allowing a user to postpone
> > a required reboot of their system. I don't mind if the users are prompted
> > for a reboot, but I need to allow them to click 'restart later' if they are
> > in the middle of a task. Is there a way to meet both needs?
> > Thanks,
> > Joe