Automatic Updates options are all grey out for the for all the DCs

[Guest John Z]

Hi, Everyone,

 

There is a weird thing happened to all the domain controller computers (all

Windows server 2003 std) in our company. I have not noticed when exactly this

started. It seems that the Automatic Updates options at our domain

controllers are grey out. I used to check "Notify me but don't automatically

download or install them" because i don't feel comfortable if i just let the

updates automatically install to the domain controllers. But recently i

noticed the all domain controllers just do the automatic updates and I am

not able to change this settings because all the options at Automatic Updates

(from Control Panel) are grey out.

 

I checked the default domain group policy, all shows not cofigured for the

windows updates. No other group policy linked to the domain controller OU. It

seems this started to happen when I load some Windows critical updates to the

servers couple of months ago.

 

Does anyone know how to troubleshoot this or at leasts point me to the

correct direction to check?

 

Thank you very much for any help from you guys.

 

John

[Guest Meinolf Weber]

Re: Automatic Updates options are all grey out for the for all the DCs

 

Hello John,

 

Did you ever use WSUS or SMS in your environment?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi, Everyone,

>

> There is a weird thing happened to all the domain controller computers

> (all Windows server 2003 std) in our company. I have not noticed when

> exactly this started. It seems that the Automatic Updates options at

> our domain controllers are grey out. I used to check "Notify me but

> don't automatically download or install them" because i don't feel

> comfortable if i just let the updates automatically install to the

> domain controllers. But recently i noticed the all domain controllers

> just do the automatic updates and I am not able to change this

> settings because all the options at Automatic Updates (from Control

> Panel) are grey out.

>

> I checked the default domain group policy, all shows not cofigured for

> the windows updates. No other group policy linked to the domain

> controller OU. It seems this started to happen when I load some

> Windows critical updates to the servers couple of months ago.

>

> Does anyone know how to troubleshoot this or at leasts point me to the

> correct direction to check?

>

> Thank you very much for any help from you guys.

>

> John

>

[Guest John Z]

Re: Automatic Updates options are all grey out for the for all the

 

Re: Automatic Updates options are all grey out for the for all the

 

Yes, we are using WSUS. But none of the domain controllers are included in

the computer groups. And It was working pretty well untill recently I saw DC

automatically downloading and installing windows updates.

 

It is really weird.

 

Do you think WSUS could be the reason?

 

Thank you for your response.

 

John

 

"Meinolf Weber" wrote:

> Hello John,

>

> Did you ever use WSUS or SMS in your environment?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > Hi, Everyone,

> >

> > There is a weird thing happened to all the domain controller computers

> > (all Windows server 2003 std) in our company. I have not noticed when

> > exactly this started. It seems that the Automatic Updates options at

> > our domain controllers are grey out. I used to check "Notify me but

> > don't automatically download or install them" because i don't feel

> > comfortable if i just let the updates automatically install to the

> > domain controllers. But recently i noticed the all domain controllers

> > just do the automatic updates and I am not able to change this

> > settings because all the options at Automatic Updates (from Control

> > Panel) are grey out.

> >

> > I checked the default domain group policy, all shows not cofigured for

> > the windows updates. No other group policy linked to the domain

> > controller OU. It seems this started to happen when I load some

> > Windows critical updates to the servers couple of months ago.

> >

> > Does anyone know how to troubleshoot this or at leasts point me to the

> > correct direction to check?

> >

> > Thank you very much for any help from you guys.

> >

> > John

> >

>

>

>

[Guest Meinolf Weber]

Re: Automatic Updates options are all grey out for the for all the

 

Re: Automatic Updates options are all grey out for the for all the

 

Hello John,

 

Check in the computer configuration/administrative templates and also user

configuration/administrative templates if the wuau.adm is added, rightclick

administrative templates, choose add/remove and look for it. And i would

still chekc with gpresult on a dc to check for an update policy, run it with

the verbose switch gpresult /v and check again.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Yes, we are using WSUS. But none of the domain controllers are

> included in the computer groups. And It was working pretty well untill

> recently I saw DC automatically downloading and installing windows

> updates.

>

> It is really weird.

>

> Do you think WSUS could be the reason?

>

> Thank you for your response.

>

> John

>

> "Meinolf Weber" wrote:

>

>> Hello John,

>>

>> Did you ever use WSUS or SMS in your environment?

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers

>> no rights.

>> ** Please do NOT email, only reply to Newsgroups

>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> Hi, Everyone,

>>>

>>> There is a weird thing happened to all the domain controller

>>> computers (all Windows server 2003 std) in our company. I have not

>>> noticed when exactly this started. It seems that the Automatic

>>> Updates options at our domain controllers are grey out. I used to

>>> check "Notify me but don't automatically download or install them"

>>> because i don't feel comfortable if i just let the updates

>>> automatically install to the domain controllers. But recently i

>>> noticed the all domain controllers just do the automatic updates

>>> and I am not able to change this settings because all the options at

>>> Automatic Updates (from Control Panel) are grey out.

>>>

>>> I checked the default domain group policy, all shows not cofigured

>>> for the windows updates. No other group policy linked to the domain

>>> controller OU. It seems this started to happen when I load some

>>> Windows critical updates to the servers couple of months ago.

>>>

>>> Does anyone know how to troubleshoot this or at leasts point me to

>>> the correct direction to check?

>>>

>>> Thank you very much for any help from you guys.

>>>

>>> John

>>>

[Guest John Z]

Re: Automatic Updates options are all grey out for the for all the

 

Re: Automatic Updates options are all grey out for the for all the

 

Hi, Meinolf,

 

Thank you very much for your response.

 

As you suggested, i checked computer configuration/administrative templates

and user configuration/administrative templates and wuau.adm is added in both

templates. I further looked into computer configuration/administrative

templates/Windows Components/windows update and User

Configuration/administrative templates/Windows Components/Windows Update, all

are showing not configured. I also checked with gpresult /v, and i found

nothing. It shows N/A under adminstrative templates at both places. only

default domain controller policy is applied to the Domain Controller OU.

 

Is there anything I can do further? I assume i should not remove the

wuau.adm from the templates, right? The default domain policy is "blocked

inheritance" at the domain controller OU.

 

Thank you for your time and suggestion.

 

John

 

"Meinolf Weber" wrote:

> Hello John,

>

> Check in the computer configuration/administrative templates and also user

> configuration/administrative templates if the wuau.adm is added, rightclick

> administrative templates, choose add/remove and look for it. And i would

> still chekc with gpresult on a dc to check for an update policy, run it with

> the verbose switch gpresult /v and check again.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > Yes, we are using WSUS. But none of the domain controllers are

> > included in the computer groups. And It was working pretty well untill

> > recently I saw DC automatically downloading and installing windows

> > updates.

> >

> > It is really weird.

> >

> > Do you think WSUS could be the reason?

> >

> > Thank you for your response.

> >

> > John

> >

> > "Meinolf Weber" wrote:

> >

> >> Hello John,

> >>

> >> Did you ever use WSUS or SMS in your environment?

> >>

> >> Best regards

> >>

> >> Meinolf Weber

> >> Disclaimer: This posting is provided "AS IS" with no warranties, and

> >> confers

> >> no rights.

> >> ** Please do NOT email, only reply to Newsgroups

> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> >>> Hi, Everyone,

> >>>

> >>> There is a weird thing happened to all the domain controller

> >>> computers (all Windows server 2003 std) in our company. I have not

> >>> noticed when exactly this started. It seems that the Automatic

> >>> Updates options at our domain controllers are grey out. I used to

> >>> check "Notify me but don't automatically download or install them"

> >>> because i don't feel comfortable if i just let the updates

> >>> automatically install to the domain controllers. But recently i

> >>> noticed the all domain controllers just do the automatic updates

> >>> and I am not able to change this settings because all the options at

> >>> Automatic Updates (from Control Panel) are grey out.

> >>>

> >>> I checked the default domain group policy, all shows not cofigured

> >>> for the windows updates. No other group policy linked to the domain

> >>> controller OU. It seems this started to happen when I load some

> >>> Windows critical updates to the servers couple of months ago.

> >>>

> >>> Does anyone know how to troubleshoot this or at leasts point me to

> >>> the correct direction to check?

> >>>

> >>> Thank you very much for any help from you guys.

> >>>

> >>> John

> >>>

>

>

>

[Guest John Fleming]

Re: Automatic Updates options are all grey out for the for all the

 

Re: Automatic Updates options are all grey out for the for all the

 

After changing the settings in group policy (I set them back to the default

of 'Not Configured'), restart the Automatic Updates Service (Start > Run >

services.msc <Enter> to bring up the services list). After restarting the

Automatic Updates service, the selected choice should no longer be grayed out

in Control Panel > Automatic Updates.

 

"John Z" wrote:

> Hi, Meinolf,

>

> Thank you very much for your response.

>

> As you suggested, i checked computer configuration/administrative templates

> and user configuration/administrative templates and wuau.adm is added in both

> templates. I further looked into computer configuration/administrative

> templates/Windows Components/windows update and User

> Configuration/administrative templates/Windows Components/Windows Update, all

> are showing not configured. I also checked with gpresult /v, and i found

> nothing. It shows N/A under adminstrative templates at both places. only

> default domain controller policy is applied to the Domain Controller OU.

>

> Is there anything I can do further? I assume i should not remove the

> wuau.adm from the templates, right? The default domain policy is "blocked

> inheritance" at the domain controller OU.

>

> Thank you for your time and suggestion.

>

> John

>

> "Meinolf Weber" wrote:

>

> > Hello John,

> >

> > Check in the computer configuration/administrative templates and also user

> > configuration/administrative templates if the wuau.adm is added, rightclick

> > administrative templates, choose add/remove and look for it. And i would

> > still chekc with gpresult on a dc to check for an update policy, run it with

> > the verbose switch gpresult /v and check again.

> >

> > Best regards

> >

> > Meinolf Weber

> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> > no rights.

> > ** Please do NOT email, only reply to Newsgroups

> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> >

> > > Yes, we are using WSUS. But none of the domain controllers are

> > > included in the computer groups. And It was working pretty well untill

> > > recently I saw DC automatically downloading and installing windows

> > > updates.

> > >

> > > It is really weird.

> > >

> > > Do you think WSUS could be the reason?

> > >

> > > Thank you for your response.

> > >

> > > John

> > >

> > > "Meinolf Weber" wrote:

> > >

> > >> Hello John,

> > >>

> > >> Did you ever use WSUS or SMS in your environment?

> > >>

> > >> Best regards

> > >>

> > >> Meinolf Weber

> > >> Disclaimer: This posting is provided "AS IS" with no warranties, and

> > >> confers

> > >> no rights.

> > >> ** Please do NOT email, only reply to Newsgroups

> > >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> > >>> Hi, Everyone,

> > >>>

> > >>> There is a weird thing happened to all the domain controller

> > >>> computers (all Windows server 2003 std) in our company. I have not

> > >>> noticed when exactly this started. It seems that the Automatic

> > >>> Updates options at our domain controllers are grey out. I used to

> > >>> check "Notify me but don't automatically download or install them"

> > >>> because i don't feel comfortable if i just let the updates

> > >>> automatically install to the domain controllers. But recently i

> > >>> noticed the all domain controllers just do the automatic updates

> > >>> and I am not able to change this settings because all the options at

> > >>> Automatic Updates (from Control Panel) are grey out.

> > >>>

> > >>> I checked the default domain group policy, all shows not cofigured

> > >>> for the windows updates. No other group policy linked to the domain

> > >>> controller OU. It seems this started to happen when I load some

> > >>> Windows critical updates to the servers couple of months ago.

> > >>>

> > >>> Does anyone know how to troubleshoot this or at leasts point me to

> > >>> the correct direction to check?

> > >>>

> > >>> Thank you very much for any help from you guys.

> > >>>

> > >>> John

> > >>>

> >

> >

> >

[Guest Meinolf Weber]

Re: Automatic Updates options are all grey out for the for all the

 

Re: Automatic Updates options are all grey out for the for all the

 

Hello John,

 

Which GPO do you talk about to solve your problem?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> After changing the settings in group policy (I set them back to the

> default of 'Not Configured'), restart the Automatic Updates Service

> (Start > Run > services.msc <Enter> to bring up the services list).

> After restarting the Automatic Updates service, the selected choice

> should no longer be grayed out in Control Panel > Automatic Updates.

>

> "John Z" wrote:

>

>> Hi, Meinolf,

>>

>> Thank you very much for your response.

>>

>> As you suggested, i checked computer configuration/administrative

>> templates and user configuration/administrative templates and

>> wuau.adm is added in both templates. I further looked into computer

>> configuration/administrative templates/Windows Components/windows

>> update and User Configuration/administrative templates/Windows

>> Components/Windows Update, all are showing not configured. I also

>> checked with gpresult /v, and i found nothing. It shows N/A under

>> adminstrative templates at both places. only default domain

>> controller policy is applied to the Domain Controller OU.

>>

>> Is there anything I can do further? I assume i should not remove the

>> wuau.adm from the templates, right? The default domain policy is

>> "blocked inheritance" at the domain controller OU.

>>

>> Thank you for your time and suggestion.

>>

>> John

>>

>> "Meinolf Weber" wrote:

>>

>>> Hello John,

>>>

>>> Check in the computer configuration/administrative templates and

>>> also user configuration/administrative templates if the wuau.adm is

>>> added, rightclick administrative templates, choose add/remove and

>>> look for it. And i would still chekc with gpresult on a dc to check

>>> for an update policy, run it with the verbose switch gpresult /v

>>> and check again.

>>>

>>> Best regards

>>>

>>> Meinolf Weber

>>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>>> confers

>>> no rights.

>>> ** Please do NOT email, only reply to Newsgroups

>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>>> Yes, we are using WSUS. But none of the domain controllers are

>>>> included in the computer groups. And It was working pretty well

>>>> untill recently I saw DC automatically downloading and installing

>>>> windows updates.

>>>>

>>>> It is really weird.

>>>>

>>>> Do you think WSUS could be the reason?

>>>>

>>>> Thank you for your response.

>>>>

>>>> John

>>>>

>>>> "Meinolf Weber" wrote:

>>>>

>>>>> Hello John,

>>>>>

>>>>> Did you ever use WSUS or SMS in your environment?

>>>>>

>>>>> Best regards

>>>>>

>>>>> Meinolf Weber

>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,

>>>>> and

>>>>> confers

>>>>> no rights.

>>>>> ** Please do NOT email, only reply to Newsgroups

>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>>>>> Hi, Everyone,

>>>>>>

>>>>>> There is a weird thing happened to all the domain controller

>>>>>> computers (all Windows server 2003 std) in our company. I have

>>>>>> not

>>>>>> noticed when exactly this started. It seems that the Automatic

>>>>>> Updates options at our domain controllers are grey out. I used to

>>>>>> check "Notify me but don't automatically download or install

>>>>>> them"

>>>>>> because i don't feel comfortable if i just let the updates

>>>>>> automatically install to the domain controllers. But recently i

>>>>>> noticed the all domain controllers just do the automatic updates

>>>>>> and I am not able to change this settings because all the options

>>>>>> at

>>>>>> Automatic Updates (from Control Panel) are grey out.

>>>>>> I checked the default domain group policy, all shows not

>>>>>> cofigured for the windows updates. No other group policy linked

>>>>>> to the domain controller OU. It seems this started to happen when

>>>>>> I load some Windows critical updates to the servers couple of

>>>>>> months ago.

>>>>>>

>>>>>> Does anyone know how to troubleshoot this or at leasts point me

>>>>>> to the correct direction to check?

>>>>>>

>>>>>> Thank you very much for any help from you guys.

>>>>>>

>>>>>> John

>>>>>>