Windows 10: Why did users get a log OFF message after WSUS GPO was applied?

The issue: My companies users received the following earlier today:





What changed? I had added our "WSUS Servers" Group Policy to a group of servers in our farm, which included our 3 RDS servers.

What is the policy about? The GPO sets Windows Updates to “Auto download and notify for install”, and sets the URL

to get them fromlocal server

Steps I took: I linked the WSUS GPO to the few remaining OU's that weren't part of the WSUS GPO.
I set the GPO to "Enforced", and then ran a "Group Policy Update" on the OU's, using Group Policy Management

console.


The WSUS GPO has no "User Configuration" settings.. and so , I didn't expect any user interaction to take place.

Any idea why the end users would have gotten this?


Thanks,

Rich

:)

 

re gpo not applying - filtering: not applied (empty) Computers not showing up on wsus

hi

I got this issue

gpo not applying - filtering: not applied (empty) Computers not showing up on wsus

I have apply the computer and to gpo

has anyone fixed this issue

also URLS http address are not showing in regedit and no AU file

on the windows update log the address is not there

From Oliver

 

GPO for Automatic Updates doesn't seem to be applying


Howdy,

I'm trying to create a GPO to point our Windows 10 machines to our WSUS server and then use Automatic Download and Install during a maintenance schedule.

• I've gone under Automatic Maintenance Activation Boundary and set that to 13:00 (1PM) for testing.
• I've gone under Maintenance Random Delay and set that to 1 hour

• I've gone under Config Automatic Updates and set it to 4 (download and install). I also set day to Saturday and time to 13:00 (1PM) but I don't know how this affects the Maintenance Boundary up above...
• I've gone under Specify Intranet Site and put in our WSUS server.

Anyway, I then ran a GPUpdate on my laptop which worked and gpresult says it applied the setting. However, when I go under All Settings | Update & security and then click Advance Options, it still shows "Never check for updates" which is what our normal GPO for everyone else uses. I put my machine in a sub-OU and assigned the test GPO to that sub folder. The main WSUS GPO is not Enforced and the test GPO is Enforced.

Should that dropdown change to reflect the current settings? Is there some other way to tell if the settings are applied correctly? I don't want to click "Check for Updates" because that usually checks and installs which is NOT what I want to do. I want to test the automatic install portion but can't tell if the right settings are in place or not.

I hope that all makes sense. Let me know if I can provide any other information.

Thanks!

 

GPOs linked to user OUs not appearing in Results Wizard

Hello, I'm noticing an issue in my domain where GPOs linked to user OUs are not being applied and not even appearing in the Group Policy Results Wizard report (neither under Applied GPO's nor Denied GPO's, like they don't exist at all).

A few clues:

• I did recently release June Windows updates including MS16-072. However, I was aware of the security processing change and all the related GPO's already had "Authenticated Users" with Read and Apply permission. I added "Domain Computers" to one GPO as a
  test but no luck.
• So far, issue is appearing on Windows 10 computers only. Computers are correctly processing GPO's linked to the computer's OU/hierarchy. A GPO containing loopback-processed user settings does appear under the user settings in the Results wizard, but that
  GPO is linked to a "computers" OU.
• If I link a "user" GPO to a "computers" OU, it appears in the Results Wizard under user settings. However, this is a drastic change in behavior and will interfere with desired outcomes such as a user having drives mapped to their department's files regardless
  of which computer they use.

Please advise, do I need to adjust some setting in Windows 10 to restore processing of GPO's linked to user OU's?

Thanks in advance for any assistance.