Windows 10: Windows 10 GPOs NEVER install updates automatically - out of ideas?

All,

First some background. I have a test set up with the 3 Virtual PCs (Hyper-V) running different flavors of Windows 10.(v1607 LTSB, v1709 and now v1809)

Local GP is set on each VM - set as follows:
Computer Config->Admin Templates->WIndows Components->Windows Update->Configure Automatic Updates to Option 4 "Auto Download and Schedule the Install"

Time to kick it off is Everyday @ 6:00am on any week of each month.
My updates come from a local WSUS installed on one of my internal servers - the local GP from each VM has the address of the WSUS server. WSUS is operating correctly.

I use a typical approval routine where each Wednesday (day after Patch Tuesday) - I approve the latest cumulative updates and usually the Adobe flash patches for ONLY my "Virtual PCs" group on WSUS to ensure the . All three VMs are in this WSUS computer group.
I have spent probably a weeks worth of time over the last month trying to figure out why none of these machines will ever "automatically" download and install updates.

I have been over and over the GPOs with a various of forum groups - all have the same settings but no downloads ever occur.

The best I have seen is - after basic approvals are done on Wednesday and I check the VMs on say - Thursday - I see that all three have checked in with WSUS and all three have reported back listing the updates that need to be installed - but none of the VMs actually install anything automatically.

They all just sit there - waiting for me to open the Windows Update setting dialog manually and hit Install Now.
It's almost like these installs are actually using 3 - Auto Download and NOTIFY for install rather than 4 - Auto Download and Schedule the install.

Other settings in the GPOs are set to basically reboot the machine in 15 minutes regardless if anyone is logged in or not. I want these machines to restart no longer than 15 minutes after the updates have been installed.

I have explored the "Active Hours" thing on all three VMs and all three use the typical zone of 8:00am to 5:00pm. I would think that setting the updates to occur at 6:00am each day would allow at least 2 hours to install the updates automatically before we hit the 8:00am Active Hours start time. In other tests - I reduced Active Hours to 1:00pm - 3:00pm and still no updates install even with no one using the VM from 6:00am to 12:59pm. I still have to manually click Install Now.

What am I missing? Appreciate any tips from the field.
B

:)

 

windows automatic updates

i have some questions about the windows automatic updates in windows xp pro w sp/2. ive got about forty updates they recommend , mostly for security but i only installed two today. after installing them i found them in my add/remove programs in the control panel, if i add all these updates that is a lot of space on my hd almost 1 gig. i thought that updates just updated files and not created new programs. should i innore all these update suggestions from microsoft?

 

Microsoft to push automatic Windows 10 upgrades in 2016

"Microsoft has announced that Windows 10 will be automatically rolled out next year to all users of its older operating systems who have selected to receive updates.

Until now, users of Windows 7 and 8 have needed to register to upgrade to Windows 10. But that's about to change: soon the OS will be listed as an 'Optional Update' and -- from 2016 -- a 'recommended' update that will automatically install itself, if users have opted to receive updates in that way.*Shadedshun :shadedshu:

You can opt out of automatic updates to avoid this, but Microsoftsays that "we strongly discourage this in today’s connected world because of the constant risk of internet threats". You can also change your Windows Update settings to install critical updates but not recommended ones. Although it's still going to be possible to avoid installation, Microsoft seems quite determined for everyone to be using Windows 10 in near future.


The roll-out of reserved updates was initially staggered but, according to Microsoft, now Windows "will automatically kick off the upgrade process once you have made a reservation".

As an intermediate stage, Microsoft says that it will "soon" publish Windows 10 as an optional update, not installed by default, but accessible to all users."

http://www.wired.co.uk/news/archive...rade-to-be-rolled-out-automatically-next-year

 

GPO for Automatic Updates doesn't seem to be applying


Howdy,

I'm trying to create a GPO to point our Windows 10 machines to our WSUS server and then use Automatic Download and Install during a maintenance schedule.

• I've gone under Automatic Maintenance Activation Boundary and set that to 13:00 (1PM) for testing.
• I've gone under Maintenance Random Delay and set that to 1 hour

• I've gone under Config Automatic Updates and set it to 4 (download and install). I also set day to Saturday and time to 13:00 (1PM) but I don't know how this affects the Maintenance Boundary up above...
• I've gone under Specify Intranet Site and put in our WSUS server.

Anyway, I then ran a GPUpdate on my laptop which worked and gpresult says it applied the setting. However, when I go under All Settings | Update & security and then click Advance Options, it still shows "Never check for updates" which is what our normal GPO for everyone else uses. I put my machine in a sub-OU and assigned the test GPO to that sub folder. The main WSUS GPO is not Enforced and the test GPO is Enforced.

Should that dropdown change to reflect the current settings? Is there some other way to tell if the settings are applied correctly? I don't want to click "Check for Updates" because that usually checks and installs which is NOT what I want to do. I want to test the automatic install portion but can't tell if the right settings are in place or not.

I hope that all makes sense. Let me know if I can provide any other information.

Thanks!