WSUS, "Restart Later" Button Grayed Out

I am currently implementing WSUS in my domain, and I am yet again
experiencing issues with Group Policy application.

Where I am having an issue now is with period of time following an
installation. WSUS installs the update as it is directed, but when I am
prompted to restart the PC the "restart later" button is grayed out. The only
options I am given is to restart, or sit there and wait for the counter to
wind down; at which time it then restarts the PC as well.

I have set all the options in GP (No auto-restart, Delay Restart, and
Re-prompt for restart), and I am not only a local admin, but a domain admin
as well... so technically speaking I should be able to see utilize the
restart later option. Yes?

Anyone else experiencing this issue?

Nope,
We use WSUS via a GPO as well. Updates nightly, reboot is auto for
clients. Server are updates on Sunday @ 4:00 am. reboot auto, DC's are
updated auto, prompt for reboot. Never fails.

This would happen if your user is not a local admin. The thinking
around Microsoft is that if the user doesn't have admin rights, they
have no place delaying a restart. I've searched for a long time and
everyone says, in essence, it's not possible (without elevating users
to admins, which kills the "automated" part of installation).

Try this... Browse the registry to
HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\WINDOWS UPDATE\AU . Add the
DWORD key "NoAutoRebootWithLoggedOnUsers" with value of 1.

Now try your installation with the non-admin user that I assume you
were using. Does the Restart Later button become ungreyed? Does the
installation occur without user input, as desired? I've had success on
a couple of systems, but have not thoroughly tested it yet.

Scarhead wrote:
> Nope,
> We use WSUS via a GPO as well. Updates nightly, reboot is auto for
> clients. Server are updates on Sunday @ 4:00 am. reboot auto, DC's are
> updated auto, prompt for reboot. Never fails.

Figured it out! I had a deadline set for the installation:

The update had a deadline configured, and the deadline expired. In this
scenario, the WUA will install /and/ restart the system immediately upon
detecting the update with an expired deadline. All configured policies are
otherwise ignored.(1)

(1) Compliments of Lawrence Garvin