"Can not perform non-interactive scan if AU is interactive-only"

Discussion in 'Update Services' started by C-Guy, Sep 21, 2009.

  1. C-Guy

    C-Guy Guest

    Got WSUS clients not reporting back to the server.

    Found this in the WindowsUpdate.log

    "Can not perform non-interactive scan if AU is interactive-only"
    I think I have the GPO stuff right. (I can see in GPresult that the right
    info is there) and in the windows update log it shows the server and group
    membership.

    Ideas?
     
    C-Guy, Sep 21, 2009
    #1
    1. Advertisements

  2. But something isn't configured correctly or the WUAgent wouldn't be balking
    at performing the scan.

    If this is an x86 machine, please run the Client Diagnostic Tool and post
    the results; otherwise, restart the Automatic Updates service and post the
    log entries from WindowsUpdate.log for the Service Startup activities..



    --
    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)

    My Blog: http://onsitechsolutions.spaces.live.com
    Microsoft WSUS Website: http://www.microsoft.com/wsus
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
     
    Lawrence Garvin [MVP], Sep 21, 2009
    #2
    1. Advertisements

  3. C-Guy

    C-Guy Guest

    So after some playing it turns out to be a policy we are pushing which is
    turning off AU.

    So: Question is, of the 4 choices...

    Automatic
    Download and let me chose
    Notify but don't install.
    Turn off.

    Which do I want my domain policy specifying? (If I want it to be invisible
    to the end user.)

    I'd put it on Automatic but I want to specify deployment times on the WSUS
    server..not the client.

    What do you think the 'best practice' is in this regard?

    _
     
    C-Guy, Sep 21, 2009
    #3
  4. It happens more often than you might think. :)

    Well, first, you probably do not want to set this value at the *domain*
    level.

    Servers, ideally, should be configured to use "Notify but don't install", so
    that installations can be supervised during a maintenance window when
    installations can be performed and the server restarted.

    Workstations, normally, are configured to use "Automatic", so that updates
    can be installed without any requirement of user interaction at all.

    Of necessity, then, this configuration requires at least two GPOs -- one
    with AUOption=3 and another with AUOption=4.
    Severe misconception! You do not, and cannot, specify deployment times on
    the WSUS Server. The only things you can do at the WSUS Server are:

    1. Approve updates -- which will permit the detection and downloading of
    content, all of which will normally occur within the 22 hours following the
    time the approval is posted.

    2. Specify a deadline, which is the No Later Than time that an update will
    be installed, provided the update has not been installed from the several
    methodologies that would be available before the deadline is reached (e.g. a
    Scheduled Installation for workstations; a User Initiated installation for
    workstations; an Admin initiated installation for servers).
    The above represents what is commonly accepted "best practice" at this time.


    --
    Lawrence Garvin, M.S., MCITP:EA, MCDBA
    Principal/CTO, Onsite Technology Solutions, Houston, Texas
    Microsoft MVP - Software Distribution (2005-2009)

    My Blog: http://onsitechsolutions.spaces.live.com
    Microsoft WSUS Website: http://www.microsoft.com/wsus
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
     
    Lawrence Garvin [MVP], Sep 22, 2009
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
There are no similar threads yet.
Loading...