Automatic Updates and Detection Frequency dylan <dylan.roehrig[ at ]gmail.com> 6/11/2007 7:25:49 PM Hi, I'm testing out WSUS 3 for updates and have a question about proper group policy settings. If I set the Configure Automatic Updates properties to 4- Auto Download and schedule the install Every day at 12:00pm and have the Automatic Updates detection frequency set to 24 hours, does the machine download the updates if they are available after 24 hours, and then not install them until 12:00pm comes around? Also, I have a concern about using these settings on my servers because I can't have them rebooting in the middle of the day just because no one is logged into them. Is setting the scheduled install time on the servers to be 3:00am enough to remedy this? I'm worried that if the server's detect time happens to be 7am, that it will detect new updates at 7, and since 3am has passed, will install them and reboot right away.

Re: Automatic Updates and Detection Frequency Harry Johnston <harry[ at ]scms.waikato.ac.nz> 6/11/2007 8:26:47 PM dylan wrote: [Quoted Text] > I'm testing out WSUS 3 for updates and have a question about proper > group policy settings. If I set the Configure Automatic Updates > properties to 4- Auto Download and schedule the install Every day at > 12:00pm and have the Automatic Updates detection frequency set to 24 > hours, does the machine download the updates if they are available > after 24 hours, and then not install them until 12:00pm comes around? The updates are downloaded as soon as they are detected. Detections will occur approximately every 24 hours at random times. Once one or more updates are downloaded, they will install the next time the clock hits 12pm. Exception:- if 12pm passes while the client is turned off, it may download and install any available updates straight away the next time it is turned on (even if the updates weren't approved until after 12pm). Other exception:- configuring a deadline on an update may affect the scheduling. I'm unclear on the exact behaviour of deadlines as I've never used them. > Also, I have a concern about using these settings on my servers > because I can't have them rebooting in the middle of the day just > because no one is logged into them. Is setting the scheduled install > time on the servers to be 3:00am enough to remedy this? I'm worried > that if the server's detect time happens to be 7am, that it will > detect new updates at 7, and since 3am has passed, will install them > and reboot right away. No, it will wait until the following morning. The recommended procedure for servers is to use option 3, auto download and install manually, so that you can schedule the outage; however if you don't mind the servers rebooting by themselves in the middle of the night you can configure them to do so. Harry.

Re: Automatic Updates and Detection Frequency dylan <dylan.roehrig[ at ]gmail.com> 6/11/2007 8:38:45 PM On Jun 11, 4:26 pm, Harry Johnston <h...[ at ]scms.waikato.ac.nz> wrote: [Quoted Text] > dylan wrote: > > I'm testing out WSUS 3 for updates and have a question about proper > > group policy settings. If I set the Configure Automatic Updates > > properties to 4- Auto Download and schedule the install Every day at > > 12:00pm and have the Automatic Updates detection frequency set to 24 > > hours, does the machine download the updates if they are available > > after 24 hours, and then not install them until 12:00pm comes around? > > The updates are downloaded as soon as they are detected. Detections will occur > approximately every 24 hours at random times. Once one or more updates are > downloaded, they will install the next time the clock hits 12pm. > > Exception:- if 12pm passes while the client is turned off, it may download and > install any available updates straight away the next time it is turned on (even > if the updates weren't approved until after 12pm). > > Other exception:- configuring a deadline on an update may affect the scheduling. > I'm unclear on the exact behaviour of deadlines as I've never used them. > > > Also, I have a concern about using these settings on my servers > > because I can't have them rebooting in the middle of the day just > > because no one is logged into them. Is setting the scheduled install > > time on the servers to be 3:00am enough to remedy this? I'm worried > > that if the server's detect time happens to be 7am, that it will > > detect new updates at 7, and since 3am has passed, will install them > > and reboot right away. > > No, it will wait until the following morning. The recommended procedure for > servers is to use option 3, auto download and install manually, so that you can > schedule the outage; however if you don't mind the servers rebooting by > themselves in the middle of the night you can configure them to do so. > > Harry. Hi Harry, Thank you very much, you've cleared up a lot for me. Most of the servers I don't mind rebooting on their own in the middle of the night, but for some of them this would be an issue, so I'll just set up a different GPO for those servers. Thanks again. Dylan

Re: Automatic Updates and Detection Frequency "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 6/11/2007 11:24:41 PM "Harry Johnston" <harry[ at ]scms.waikato.ac.nz> wrote in message news:eypcZbGrHHA.3284[ at ]TK2MSFTNGP03.phx.gbl... [Quoted Text] > dylan wrote: > >> I'm testing out WSUS 3 for updates and have a question about proper >> group policy settings. If I set the Configure Automatic Updates >> properties to 4- Auto Download and schedule the install Every day at >> 12:00pm and have the Automatic Updates detection frequency set to 24 >> hours, does the machine download the updates if they are available >> after 24 hours, and then not install them until 12:00pm comes around? > Other exception:- configuring a deadline on an update may affect the > scheduling. I'm unclear on the exact behaviour of deadlines as I've never > used them. With respect to configuring deadlines. If the deadline has *not* expired, the update will be installed at the next scheduled installation event after the update is detected/downloaded, or at the next powerup (by default), if the machine was turned off during the scheduled installation event, unless install-at-powerup has been disabled. If the deadline expires after the update has been detected/downloaded but before the scheduled installation event, the update will be installed at the configured deadline time, without respect for the scheduled event. In fact, if you inspect the logfiles, you'll find that when the deadline comes before the next scheduled installation, the WUA actually schedules the installation at the deadline, not at the next scheduled installation event. If the update is not detected/downloaded prior to the deadline, the update will be installed *immediately* upon the successful detection/download of the update. Note also that with deadlines, all privileged interaction with respect to controlling reboots is disabled. The system *WILL* reboot immediately upon installing an update when a deadline is configured, even if the deadline has not expired!!! -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....

Re: Automatic Updates and Detection Frequency dylan <dylan.roehrig[ at ]gmail.com> 6/12/2007 2:17:44 PM On Jun 11, 7:24 pm, "Lawrence Garvin \(MVP\)" <onsit...[ at ]community.nospam> wrote: [Quoted Text] > "Harry Johnston" <h...[ at ]scms.waikato.ac.nz> wrote in message > > news:eypcZbGrHHA.3284[ at ]TK2MSFTNGP03.phx.gbl... > > > dylan wrote: > > >> I'm testing out WSUS 3 for updates and have a question about proper > >> group policy settings. If I set the Configure Automatic Updates > >> properties to 4- Auto Download and schedule the install Every day at > >> 12:00pm and have the Automatic Updates detection frequency set to 24 > >> hours, does the machine download the updates if they are available > >> after 24 hours, and then not install them until 12:00pm comes around? > > Other exception:- configuring a deadline on an update may affect the > > scheduling. I'm unclear on the exact behaviour of deadlines as I've never > > used them. > > With respect to configuring deadlines. > > If the deadline has *not* expired, the update will be installed at the next > scheduled installation event after the update is detected/downloaded, or at > the next powerup (by default), if the machine was turned off during the > scheduled installation event, unless install-at-powerup has been disabled. > > If the deadline expires after the update has been detected/downloaded but > before the scheduled installation event, the update will be installed at the > configured deadline time, without respect for the scheduled event. In fact, > if you inspect the logfiles, you'll find that when the deadline comes before > the next scheduled installation, the WUA actually schedules the installation > at the deadline, not at the next scheduled installation event. > > If the update is not detected/downloaded prior to the deadline, the update > will be installed *immediately* upon the successful detection/download of > the update. > > Note also that with deadlines, all privileged interaction with respect to > controlling reboots is disabled. The system *WILL* reboot immediately upon > installing an update when a deadline is configured, even if the deadline has > not expired!!! > > -- > Lawrence Garvin, M.S., MCTS, MCP > Independent WSUS Evangelist > MVP-Software Distribution (2005-2007)https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D09... > > Everything you need for WSUS is athttp://technet2.microsoft.com/windowsserver/en/technologies/featured/... > > And, almost everything else is athttp://wsusinfo.onsitechsolutions.com > .... By deadlines, you're referring to soemthing that is set within WSUS correct? I'm pretty new to this app, so I'm not quite familiar with all of the terminology associated with it. I just want to make sure that you're not referring to something else that is set in a GPO or something. Thanks Dylan

Re: Automatic Updates and Detection Frequency Harry Johnston <harry[ at ]scms.waikato.ac.nz> 6/12/2007 10:56:53 PM dylan wrote: [Quoted Text] > By deadlines, you're referring to soemthing that is set within WSUS > correct? Yes. Unless you have explicitly set a deadline for one or more updates in WSUS, this won't apply. (It's a per-update setting.) Harry.