WSUS - force update-installation...

Discussion in 'Update Services' started by Detlef Buckatz, Feb 12, 2009.

  1. Hello Newsgroup,

    I have configured WSUS with a GPO.
    I disable the "Do not adjust default option to 'Install..."-option, so
    "Install Updates and Shut Down"-entry is shown in the shutdown-dialog as
    default - and it works.
    Now the user have the option to bypass the update-installation by selecting
    another entry in the shutdown-dialog.
    Question: is there any way to force the installation of the updates, after
    the user has X-times bypass the installation manually?

    Thanks in advance...
    Detlef Buckatz, Feb 12, 2009
    #1
    1. Advertising

  2. "Detlef Buckatz" <> wrote in message
    news:...
    > Hello Newsgroup,
    >
    > I have configured WSUS with a GPO.
    > I disable the "Do not adjust default option to 'Install..."-option, so
    > "Install Updates and Shut Down"-entry is shown in the shutdown-dialog as
    > default - and it works.
    > Now the user have the option to bypass the update-installation by
    > selecting another entry in the shutdown-dialog.
    > Question: is there any way to force the installation of the updates, after
    > the user has X-times bypass the installation manually?


    The policy does not prevent the choosing of another option, regardless of
    the setting, it merely determines whether "Install Updates and Shutdown" is
    always the presented (default) option.

    If you *enable* this policy, the option presented will always be "install
    Updates and Shutdown", but the user will still be able to change that
    selection (e.g. to Reboot).

    If you *disable* this policy, the option presented will be the most recent
    option used.

    Take note of the negative wording of the policy. If you enable "Do not
    adjust.." it will not adjust; if you disable "Do not adjust", it will always
    adjust.

    As a backup to relying on use of this option, you should also have an
    overnight scheduled installation event, and the policy "Reschedule automatic
    updates scheduled installation" should be enabled with an appropriate
    power-on delay configured -- I suggest one minute.

    This ensures that if the user does bypass the "Install Updates and Shutdown"
    option by choosing only "Shutdown", then the updates will be installed at
    the next power-on.

    Rest assured after about one or two inconveniences from waiting for updates
    to install at power-on, they'll be sure to use the "Install Updates and
    Shutdown" option the next time it's presented. :)




    --
    Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)

    MS WSUS Website: http://www.microsoft.com/wsus
    My Websites: http://www.onsitechsolutions.com;
    http://wsusinfo.onsitechsolutions.com
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    Lawrence Garvin \(MVP\), Feb 12, 2009
    #2
    1. Advertising

  3. thank you Lawrence.

    I think if "Reschedule Automatic Updates scheduled installations" is
    activated - it works only if "Configure Automatic Updates" is set to option
    4 (Auto download and schedule the install).
    In my case "Configure Automatic Updates" is set to 3 (Auto download and
    notify for install).
    So, install at power-on is not an option for me - sorry, for our custumer -
    not for me. In our environment we don't discuss about updates - we install
    them ;-)
    I think it is not possible (with built-in features from MS) to force
    update-installations if "Configure Automatic Updates" is set to 3 - is this
    right?

    Do you know whether there are 3rd party tools which realize such a szenario
    ("Is there any way to force the installation of the updates, after the user
    has X-times bypass the installation manually?")?

    thanks again
    Detlef
    Detlef Buckatz, Feb 13, 2009
    #3
  4. "Detlef Buckatz" <> wrote in message
    news:...

    > I think if "Reschedule Automatic Updates scheduled installations" is
    > activated - it works only if "Configure Automatic Updates" is set to
    > option
    > 4 (Auto download and schedule the install).


    This is correct.

    > In my case "Configure Automatic Updates" is set to 3 (Auto download and
    > notify for install).


    So who's responsible for installing updates on workstations?


    > I think it is not possible (with built-in features from MS) to force
    > update-installations if "Configure Automatic Updates" is set to 3 - is
    > this
    > right?


    If you set a deadline on the update, this would force the installation of
    the update at the specified expiry time on the deadline. So, if Option #3 is
    being used for desktops, and you've given the user X days to use the
    "Install Updates and Shutdown" feature, and they've bypassed the
    installation -- a deadline, which expires overnight, can be used to force
    installation at power-on, even if Option #3 is being used.


    > Do you know whether there are 3rd party tools which realize such a
    > szenario
    > ("Is there any way to force the installation of the updates, after the
    > user
    > has X-times bypass the installation manually?")?


    There is, in fact. For this feature you may be interested in the Eminentware
    Extension Pack for WSUS. (http://www.eminientware.com)

    The advantage of such a tool is that you can then take installation of
    updates completely out of the hands of the user and give complete ownership
    of that process back to the "administrator".



    --
    Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)

    MS WSUS Website: http://www.microsoft.com/wsus
    My Websites: http://www.onsitechsolutions.com;
    http://wsusinfo.onsitechsolutions.com
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    Lawrence Garvin \(MVP\), Feb 13, 2009
    #4
  5. thank you Lawrence.

    > So who's responsible for installing updates on workstations?

    It is a 'difficult affair'..once there was a problem with one update
    (TCPchimney/switches) - since then they said: 'no updates without our
    approval'. Now, they want have updates - with a big 'wishlist'...
    > If you set a deadline on the update...

    that is a good tip.

    Thanks a lot...
    Detlef
    Detlef Buckatz, Feb 16, 2009
    #5
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. funks
    Replies:
    0
    Views:
    873
    funks
    Oct 20, 2008
  2. Andrew

    Force WSUS Client to Poll WSUS Server

    Andrew, Sep 13, 2007, in forum: Windows Update
    Replies:
    8
    Views:
    1,033
    Robert Aldwinckle
    Sep 15, 2007
  3. chace zhang
    Replies:
    0
    Views:
    1,023
    chace zhang
    Nov 14, 2006
  4. RollNpc
    Replies:
    9
    Views:
    287
    Simone
    Feb 2, 2010
  5. Hossy
    Replies:
    0
    Views:
    191
    Hossy
    Jan 4, 2006
Loading...

Share This Page