No reboot prompt for end users since KB936301 applied Andy Smith <smithers[ at ]altavista.net> 6/20/2007 6:28:25 AM We are not running WSUS 3.0 yet, but seems in our 2.0 SP1 environment that the install of the AU client update 936301 onto the WSUS server has stopped the restart prompt appearing for end users. I guess I didn't thoroughly check 936301 first, but was not aware it would put the new AU client into the /Selfupdate folder so existing clients would get it at next contact. Had a couple of users over the past couple of days, who had pending updates (because they recently were re-RISed - we have not yet deployed the June updates to production users), and they had a restart after the 30 minute countdown (we enforce the restart at our site) but they did NOT receive the 'Restart required, your computer will restart in 30 minutes' prompt as usual. Windowsupdate.log reads as follows - Launched new AU client for directive 'Reboot Warning', session id = 0x0 2007-06-19 15:00:29:138 856 444 AU Windows Update is disabled by policy for user So I assume from reading the other post about missing notification on WSUS 3.0 that the v7.0 client now requires Windows update access to be enabled by policy otherwise the restart prompt will not appear? So is that a bug that was in the old AU client in that it should not have been displaying any message if windows update access was disabled, but it did anyway, or was it working as intended and the new AU client has broken it? In any event, will look at enabling WU access, but switching off the internet access to WU as per the suggestion in that post.

RE: No reboot prompt for end users since KB936301 applied eddieb[ at ]online.microsoft.com (Eddie Bowers [MSFT]) 6/20/2007 10:05:45 PM It does appear that this behavior changed with the new client (DisableWindowsUpdateAccess prevents the reboot warning). We are looking into it. Please call in if this is a critical issue for you. We need to be aware of these issues (and the volume of customers experiencing them) to get them resolved. Eddie Bowers Security Support Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers no rights.

Re: No reboot prompt for end users since KB936301 applied "Eric Young" <youngec[ at ]hotmail.com> 6/21/2007 1:57:30 AM I believe there was a workaround mentioned (thread titled "My Users are no Longer Given the Prompt to Reboot"), but I have yet to verify. The workaround was to enable the group policy "Turn off access to all Windows Update Features" via computer configuration, rather than via user configuration. -Eric "Eddie Bowers [MSFT]" <eddieb[ at ]online.microsoft.com> wrote in message news:zvVSsc4sHHA.1528[ at ]TK2MSFTNGHUB02.phx.gbl... [Quoted Text] > It does appear that this behavior changed with the new client > (DisableWindowsUpdateAccess prevents the reboot warning). > We are looking into it. Please call in if this is a critical issue for > you. > We need to be aware of these issues (and the volume of customers > experiencing them) to get them resolved. > > Eddie Bowers > Security Support > Microsoft Corporation > > This posting is provided "AS IS" with no warranties, and confers no > rights. >

Re: No reboot prompt for end users since KB936301 applied Andy Smith <smithers[ at ]altavista.net> 6/22/2007 7:21:23 AM Confirmed the workaround for the problem sorts things out - Set User Configuration\Admin Templates\Windows Components\Windows Update "Remove access to use all Windows Update features" = DISABLED (previously, we had that set to ENABLED in our Default User Policy) And also Set Computer Configuration\Admin Templates\System\Internet Communication Management\Internet Communication Settings "Turn off access to all Windows Update features" = ENABLED (we did not have this previously set) In conjunction with our previous and ongoing use of policy setting Computer Configuration\Admin Templates\Windows Components\Windows Update - "Allow non-administrators to receive update notification" = DISABLED, we have returned to previously functionality prior to the WSUS 3.0 AU client being deployed. i.e. Administrators will receive the tray icon prompts, if logged on, but end-users (non-admins) will not receive any dialogue from the AU tray icon. However, after the above policy changes, end users now once again receive the restart prompt at the end of an installation and therefore do not receive unexpected restarts (since we enforce restarts at our site, so end-users don't have the choice to 'Restart Later' :) ) Happy again :) On 21 Jun, 02:57, "Eric Young" <youn...[ at ]hotmail.com> wrote: [Quoted Text] > I believe there was a workaround mentioned (thread titled "My Users are no > Longer Given the Prompt to Reboot"), but I have yet to verify. The > workaround was to enable the group policy "Turn off access to all Windows > Update Features" via computer configuration, rather than via user > configuration. > > -Eric > > "Eddie Bowers [MSFT]" <edd...[ at ]online.microsoft.com> wrote in messagenews:zvVSsc4sHHA.1528[ at ]TK2MSFTNGHUB02.phx.gbl... > > > > > It does appear that this behavior changed with the new client > > (DisableWindowsUpdateAccess prevents the reboot warning). > > We are looking into it. Please call in if this is a critical issue for > > you. > > We need to be aware of these issues (and the volume of customers > > experiencing them) to get them resolved. > > > Eddie Bowers > > Security Support > > Microsoft Corporation > > > This posting is provided "AS IS" with no warranties, and confers no > > rights.- Hide quoted text - > > - Show quoted text -