Problem:
Windows Update presents a reboot popup notification whilst CA Client Automation is installing a Patch Manager Security roll-up
Environment:
Cause:
- Automatic Updates is enabled in Windows Update and is configured to perform scheduled update installations.
Resolution:
Agents in Active Directory Environment
- Reboot the machine for any pending restarts due to updates installed via Windows Update. If there is any update installation in progress, wait for it to finish and then reboot the machine.
- To configure clients using group policy editor, go to "Computer Configuration\Administrative Templates\Windows Components\Windows Update\" node.
- Enable "No auto-restart with logged on users for scheduled automatic updates installations"
- Enable "Re-prompt for restart with scheduled installations"
- set the "restart" time interval to as long as desired.
- The maximum value permitted is 1440 minutes.
- You can use the "gpupdate /force" command on the client computer to force an immediate refresh of group policy.
- For more information, refer to https://technet.microsoft.com/en-us/library/dd939933(v=ws.10).aspx#admtemp
Agents in Non Active Directory Environment
- Reboot the machine for any pending restarts due to updates installed via Windows Update. If there is any update installation in progress, wait for it to finish and then reboot the machine.
- To configure clients in a non-active directory environment, you can either use the group policy editor to edit the local group policy object or edit the registry directly using the registry editor (regedit.exe). The parameters to set in the local group policy object would be same as discussed in point 2 above.
- To configure directly using the registry, go to "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" key. Ensure the following entries are present.
Entry Name | Data Type | Value |
NoAutoRebootWithLoggedOnUsers | Reg_DWORD | 1 |
RebootRelaunchTimeoutEnabled | Reg_DWORD | 1 |
RebootRelaunchTimeout | Reg_DWORD | 1440 |
NOTE: It's important to note that these settings would defer the reboot for the time interval specified and the machine should be rebooted for the updates (installed via Windows Update) to be configured properly. CA Client Automation takes care of rebooting the machine automatically if the updates are installed via Patch Manager.