User forced to reboot

We are currently running the latest version of WSUS on Windows 2003 SP1.
The workstations are Windows XP Professional SP1.
We have set the registry settings, so that users will receive and have the
patches applied automatically. We'd like them to have the option to restart
at a later time if they choose to. Same registry settings are applied to
everyone (Admins and non-admins).
However, the non-admins receive the prompt "Your updates have been installed
successfully. To complete installation you must restart our computer. Do
you want to restart your computer now?" The "No" option is greyed out and
cannot be clicked. Only the "Yes" option is available to them.
On the other hand, the admins receive the prompt "Updateing your computer is
almost complete. You must restart your computer for the updates to take
effect. Do you want to restart your computer now?" and they have two
options available, "Restart Now" and "Restart Later".
We'd like all the users to receive the same prompt as the Admins get.
Registry export is as follows:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"UseWUServer"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000003
"AutoInstallMinorUpdates"=dword:00000000
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:00000005
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:00000564
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000003
"RebootWarningTimeoutEnabled"=dword:00000001
"RebootWarningTimeout"=dword:00000005

Thanks.

Zoose wrote:

> We are currently running the latest version of WSUS on Windows 2003 SP1.
> The workstations are Windows XP Professional SP1.
> We have set the registry settings, so that users will receive and have the
> patches applied automatically. We'd like them to have the option to restart
> at a later time if they choose to. Same registry settings are applied to
> everyone (Admins and non-admins).
> However, the non-admins receive the prompt "Your updates have been installed
> successfully. To complete installation you must restart our computer. Do
> you want to restart your computer now?" The "No" option is greyed out and
> cannot be clicked. Only the "Yes" option is available to them.
> (snip)
Hi,

If you enable the ElevateNonAdmins AU registry setting (policy title
"Allow non-administrators to receive update notifications"), also
non-admin users will have "Restart Later" available to them.

With ElevateNonAdmins set to 1 a non-admin is allowed to select
"Restart Later", and also to use the AU icon in the system tray to
start installations before scheduled installation time (good), as
well as un-select updates that is scheduled to be installed on the
computer (not so good maybe).

With ElevateNonAdmins enabled, the end user experience of Automatic
Updates from WSUS is completely the same all the way for both admins
and non-admins.


To see this setting in the group policy editor, you will need to have
an up to date wuau.adm file, this setting is in the wuau.adm file that
comes with the WSUS server (it is actually the only setting missing
from the wuau.adm file that comes with WinXP SP2).

If you on the WSUS server go to the folder
%ProgramFiles%\Update Services\Selfupdate\au\x86\xp\
you will find wucltui.cab files under the different language folders.

Inside wucltui.cab, you will find the latest version of wuau.adm.

I use the English version from the file
C:\Program Files\Update Services\Selfupdate\au\x86\xp\en\wucltui.cab

The ElevateNonAdmins policy will set this registry value:

--------------------8<----------------------
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000001

--------------------8<----------------------


FYI:

Please post WSUS questions to the new newsgroup
microsoft.public.windows.server.update_services


WebNews link to the WSUS newsgroup:
http://www.microsoft.com/communities...pdate_services


Or use a newsgroup reader (default Outlook Express) to access this new
group:

Clicking on this link should open this group in OE:

news://msnews.microsoft.com/microsof...pdate_services





--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx