Windows update not listening to scheduled install date&time

I have a Windows XP SP2 machine that is on a domain at work. I am in the
registry and I am trying to play around with the settings so that I can get
about 50 other workstations to update automaticly.

I am in
\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Wi ndows\WindowsUpdate\AU

I have
AUOptions 4
AutoInstallMinorUpdates 1
DetectionFrequency 1
DetectionFrequencyEnabled 1
NoAUAsDefaultShutdownOption 1
NoAUShutdownOption 1
NoAutoRebootWithLoggedOnUsers 1
NoAutoUpdate 0
RebootRelaunchTimeout 5
RebootRelaunchTimeoutEnabled 1
RebootWarningTimeoutEnabled 0
RescheduleWaitTime 1
RescheduleWaitTimeEnabled 1
ScheduledInstallDay 4
ScheduledInstallTime 11
UseWUServer 0


Now this, according to my knowledge, should contact the Microsoft website.
Check for critical updates, download what is needed and install those updates
on Wednesday at 11:00am. Now from what I can see it seems to download the
updates I need (I get the pop up saying there are updates downloaded and
ready to install) however, Windows does not automaticly install them.

Any clue as to why not? I am registered for notifies on this thread so if
there is some missing information that you need let me know and I will answer
asap.

Thanks in advance

Also.

On the domain there seems to be a group policy that is applied. It's called
WUS. If I check the registry from what I can see it adds the keys of using a
WSUS and then proceeds to give the server name. Ends up this server has been
down since November (Go safety!!). Anyhow, I assume the domain policy might
be adding something that doesn't allow the system to auto update?

"Dups" wrote:

> I have a Windows XP SP2 machine that is on a domain at work. I am in the
> registry and I am trying to play around with the settings so that I can get
> about 50 other workstations to update automaticly.
>
> I am in
> \HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Wi ndows\WindowsUpdate\AU
>
> I have
> AUOptions 4
> AutoInstallMinorUpdates 1
> DetectionFrequency 1
> DetectionFrequencyEnabled 1
> NoAUAsDefaultShutdownOption 1
> NoAUShutdownOption 1
> NoAutoRebootWithLoggedOnUsers 1
> NoAutoUpdate 0
> RebootRelaunchTimeout 5
> RebootRelaunchTimeoutEnabled 1
> RebootWarningTimeoutEnabled 0
> RescheduleWaitTime 1
> RescheduleWaitTimeEnabled 1
> ScheduledInstallDay 4
> ScheduledInstallTime 11
> UseWUServer 0
>
>
> Now this, according to my knowledge, should contact the Microsoft website.
> Check for critical updates, download what is needed and install those updates
> on Wednesday at 11:00am. Now from what I can see it seems to download the
> updates I need (I get the pop up saying there are updates downloaded and
> ready to install) however, Windows does not automaticly install them.
>
> Any clue as to why not? I am registered for notifies on this thread so if
> there is some missing information that you need let me know and I will answer
> asap.
>
> Thanks in advance

Where is Group Policy residing ? That's what you have to tweak in order
to allow the workstations to able to install updates from the Microsoft
update servers.

Group Policy Web-based Newsgroup:
http://www.microsoft.com/communities...s.group_policy

NNTP link:
news://msnews.microsoft.com/microsof...s.group_policy

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Dups wrote:

> Also.
>
> On the domain there seems to be a group policy that is applied. It's called
> WUS. If I check the registry from what I can see it adds the keys of using a
> WSUS and then proceeds to give the server name. Ends up this server has been
> down since November (Go safety!!). Anyhow, I assume the domain policy might
> be adding something that doesn't allow the system to auto update?
>
> "Dups" wrote:
>
>
>>I have a Windows XP SP2 machine that is on a domain at work. I am in the
>>registry and I am trying to play around with the settings so that I can get
>>about 50 other workstations to update automaticly.
>>
>>I am in
>>\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\ Windows\WindowsUpdate\AU
>>
>>I have
>>AUOptions 4
>>AutoInstallMinorUpdates 1
>>DetectionFrequency 1
>>DetectionFrequencyEnabled 1
>>NoAUAsDefaultShutdownOption 1
>>NoAUShutdownOption 1
>>NoAutoRebootWithLoggedOnUsers 1
>>NoAutoUpdate 0
>>RebootRelaunchTimeout 5
>>RebootRelaunchTimeoutEnabled 1
>>RebootWarningTimeoutEnabled 0
>>RescheduleWaitTime 1
>>RescheduleWaitTimeEnabled 1
>>ScheduledInstallDay 4
>>ScheduledInstallTime 11
>>UseWUServer 0
>>
>>
>>Now this, according to my knowledge, should contact the Microsoft website.
>>Check for critical updates, download what is needed and install those updates
>>on Wednesday at 11:00am. Now from what I can see it seems to download the
>>updates I need (I get the pop up saying there are updates downloaded and
>>ready to install) however, Windows does not automaticly install them.
>>
>>Any clue as to why not? I am registered for notifies on this thread so if
>>there is some missing information that you need let me know and I will answer
>>asap.
>>
>>Thanks in advance

First of all, thanks for the link to the group policy newsgroup.

I am not 100% certain of the answer or what you mean by your question of
where the group policy resides. From what I understand they are usually .adm
files. I tried doing a search for "wus" on my local system and was unable to
find it. So I assume it resides on a domain controller within the company and
gets applied as I log in with my AD account.

Unfort, I only have local admin access so I am unable to modify or even view
the wus policy that is applied to my profile. I will contact the security
team to try and see if they can fix this issue with me but sadly this will be
even more painful than trying to find a solution myself

"MowGreen [MVP]" wrote:

> Where is Group Policy residing ? That's what you have to tweak in order
> to allow the workstations to able to install updates from the Microsoft
> update servers.
>
> Group Policy Web-based Newsgroup:
> http://www.microsoft.com/communities...s.group_policy
>
> NNTP link:
> news://msnews.microsoft.com/microsof...s.group_policy
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> Dups wrote:
>
> > Also.
> >
> > On the domain there seems to be a group policy that is applied. It's called
> > WUS. If I check the registry from what I can see it adds the keys of using a
> > WSUS and then proceeds to give the server name. Ends up this server has been
> > down since November (Go safety!!). Anyhow, I assume the domain policy might
> > be adding something that doesn't allow the system to auto update?
> >
> > "Dups" wrote:
> >
> >
> >>I have a Windows XP SP2 machine that is on a domain at work. I am in the
> >>registry and I am trying to play around with the settings so that I can get
> >>about 50 other workstations to update automaticly.
> >>
> >>I am in
> >>\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\ Windows\WindowsUpdate\AU
> >>
> >>I have
> >>AUOptions 4
> >>AutoInstallMinorUpdates 1
> >>DetectionFrequency 1
> >>DetectionFrequencyEnabled 1
> >>NoAUAsDefaultShutdownOption 1
> >>NoAUShutdownOption 1
> >>NoAutoRebootWithLoggedOnUsers 1
> >>NoAutoUpdate 0
> >>RebootRelaunchTimeout 5
> >>RebootRelaunchTimeoutEnabled 1
> >>RebootWarningTimeoutEnabled 0
> >>RescheduleWaitTime 1
> >>RescheduleWaitTimeEnabled 1
> >>ScheduledInstallDay 4
> >>ScheduledInstallTime 11
> >>UseWUServer 0
> >>
> >>
> >>Now this, according to my knowledge, should contact the Microsoft website.
> >>Check for critical updates, download what is needed and install those updates
> >>on Wednesday at 11:00am. Now from what I can see it seems to download the
> >>updates I need (I get the pop up saying there are updates downloaded and
> >>ready to install) however, Windows does not automaticly install them.
> >>
> >>Any clue as to why not? I am registered for notifies on this thread so if
> >>there is some missing information that you need let me know and I will answer
> >>asap.
> >>
> >>Thanks in advance
>

Dups wrote:

> Unfort, I only have local admin access so I am unable to modify or even view
> the wus policy that is applied to my profile. I will contact the security
> team to try and see if they can fix this issue with me but sadly this will be
> even more painful than trying to find a solution myself

You should be able to see the effective policy by running this in a command window:

gpresult /v

You may be able to prevent the policy being applied by changing the registry
settings then changing the permissions on those two keys so that neither
Administrators nor SYSTEM have the ability to change the values.

Harry.