Seeking Windows Update PowerShell Module user experience concerning failure to reboot automatically.

I am currently using  Windows Update PowerShell Module to updates several machines. I notice that on identically configured windows 2003 and windows 2008 servers some nodes do not reboot on their own and wait for a user confirmation. This keeps them from finishing their update cycle and requires manual intervention. This happens even if no user is logged on.
Is there a way to get reliable reboots upon reaching conclusion of a patch cycle? I notice that on windows 8 and windows 2012 there is additional support to force reboot http://support.microsoft.com/kb/2835627/en-usBut we have a lot of older platforms (thousands) and I am frustrated that I can't determine why some nodes do not complete their patch cycle by rebooting on their own while other identically built nodes do so.
Thanks.
Gautam

some nodes do not reboot on their own and wait for a user confirmation.
This happens even if no user is logged on.
This is technologically impossible, so we need to find out what else is going on in this scenario. For starters, you'll need to show us the WindowsUpdate.log entries where this update was installed and the system restarted.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Similar Messages

  • Hide Windows Updates reminders from users on Terminal server sessions

    Windows 2008 Server - Users of the terminal server are getting reminders popping up on their sessions every 4 hours with a prompt to restart and update now, or postpone until later. How can I stop them from seeing these messages?

    I would suggest that you create a GPO for your users, possiblty a loopback as its  a TS but your choice,  and include the following settings.
    Computer Configuration – Policies – Administrative Template –Windows Components – Windows Update
    Configure Automatic Updates: Enabled;
    Allow non-administrators to receive update notifications: Disable;
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. If you find an answer helpful
    then please "Vote As Helpful"

  • Has the latest Windows Update caused your users issues?

    Are the prompts you're referring to related to UAC? If so, that can be adjusted. Anyways, I haven't had a single issue with any of the machines that have been updated this week. This goes for Win 8.1 and Win 7 machines. :)

    Since Wednesday I've had 3 different Remote Salesmen (Surface Pro 2 users) report that their computers have either crashed or have been giving annoying prompts for any program they've tried to run. Probably not related but a Windows 7 Pro user randomly mentioned that their USB ports stopped working after an update. On the Surface users I noticed each had a Windows Update installed on 7/14.
    Has anyone experienced an uptick in Surface tablets or Windows 7 Pro workstations since the latest Windows update?
    This topic first appeared in the Spiceworks Community

  • Windows Update PowerShell Remoting

    I am working on a script to do Windows Updates on a remote machine. I am using the runspace and powershell objects. I can query and recieve the list of updates, but as I go to download and install them I can an error which indicates that these methods cannot be run from remote computers. Should the object creation and everything be happening on the remote computer? I thought this was the whole idea of the remoting. Am I doing something wrong?

    This script works great but I would like to make a suggestion.
    Add $VerbosePreference = "Continue" to the top and then change all Write-Host with Write-Progress.  It has the same effect except instead of saying that it is downloading an update it is giving you a progress bar as well.  Updated script below. 
    $VerbosePreference = "Continue"
    $DebugPreference = "Stop"
    function Get-WIAStatusValue($value)
       switch -exact ($value)
          0   {"NotStarted"}
          1   {"InProgress"}
          2   {"Succeeded"}
          3   {"SucceededWithErrors"}
          4   {"Failed"}
          5   {"Aborted"}
    $needsReboot = $false
    $UpdateSession = New-Object -ComObject Microsoft.Update.Session
    $UpdateSearcher = $UpdateSession.CreateUpdateSearcher()
    Write-Progress " - Searching for Updates"
    $SearchResult = $UpdateSearcher.Search("IsAssigned=1 and IsHidden=0 and IsInstalled=0")
    Write-Verbose " - Found [$($SearchResult.Updates.count)] Updates to Download and install"
    foreach($Update in $SearchResult.Updates)
       # Add Update to Collection
       $UpdatesCollection = New-Object -ComObject Microsoft.Update.UpdateColl
       if ( $Update.EulaAccepted -eq 0 ) { $Update.AcceptEula() }
       $UpdatesCollection.Add($Update) | out-null
       # Download
       Write-Progress " + Downloading Update $($Update.Title)"
       $UpdatesDownloader = $UpdateSession.CreateUpdateDownloader()
       $UpdatesDownloader.Updates = $UpdatesCollection
       $DownloadResult = $UpdatesDownloader.Download()
       $Message = "   - Download {0}" -f (Get-WIAStatusValue $DownloadResult.ResultCode)
       Write-Verbose $message   
       # Install
       Write-Progress "   - Installing Update"
       $UpdatesInstaller = $UpdateSession.CreateUpdateInstaller()
       $UpdatesInstaller.Updates = $UpdatesCollection
       $InstallResult = $UpdatesInstaller.Install()
       $Message = "   - Install {0}" -f (Get-WIAStatusValue $DownloadResult.ResultCode)
       Write-Verbose $message
       $needsReboot = $installResult.rebootRequired   
    if($needsReboot)
        Write-Debug "Restarting Computer please close all open apps"
        restart-computer

  • DLU / app, windows updates / local standard user

    We're having issues with our users not being able to update apps (patches, etc.) due to being regular user for the local profile. Our config is as follows:
    - Zen11 SP1
    - eDir auth
    - Windows XP/Win7 PCs
    - Novell client
    - Most users are set to 'user' for local profile
    - Most users have their own machine
    Is there a way to get these updates (Acrobat, Windows, Java, etc.) installed without the user entering in an 'admin' password?

    Flash Player can update silently since version 11.2. It is working ok. Quarterly Updates will install after 30 days. Critical Fixes will be faster: There was the issue with Flash Player and Mozilla in June and i have seen the 11.3.300.262 update installing around 21 of june for the Plugin and not ActiveX.
    Mozilla announced Silent updates. But its still not working for standard Users. Currently it only prevents the UAC Prompt for Admin Users.
    So we still have to update Adobe Reader, JRE, Mozilla
    Originally Posted by craig_wilson
    As well as tweak the install of the apps or use a post install action or
    some other type of bundle to disable the auto-update the apps themselves
    put out.
    How that is done is unique to each app.
    They often put some type of app in on of the Run Keys or Startup folder
    than needs to be removed so they stop trying to do it themselves, which
    is bad because generally they can't for a number of reasons ranging from
    lack of user rights to proxy/internet access issues from a corporate site.
    On 7/18/2012 1:38 AM, Shaun Pond wrote:
    > Bertschj,
    >
    > Easiest is to use Patch Management (but obviously there's a
    > subscription cost). You could try Home | ITNinja and go look for
    > each version of each app and see if someone's found out what the quiet
    > switches are. For Adobe apps you generally have to get their
    > redistributable versions, which involves signing up to an agreement.
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Knowledge Partner
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • Exclude a KB number from a Windows update Powershell Script.

    I am having a heck of a time removing a patch from the $updates patch collection. We have one that we do not want to install. Using attempts like $updates.remove are not working. Has anyone accomplished this before?
    thanks
    $updateSession = new-object -com "Microsoft.Update.Session"
    Write-Host("Searching for applicable updates...") -Fore Green
    $updates=$updateSession.CreateupdateSearcher().Search($criteria).Updates
    $downloader = $updateSession.CreateUpdateDownloader()         
    $downloader.Updates = $Updates
    foreach ($y in $updates){$y.kbarticleIDs}
    (section to remove a KB from $updates, based on KB)

    Here is a little script that will create a hash table of all applicable updates, and their associated UUID's.  This can be used to look up the UUID, to use as a criteria when searching again:
    $upids = @{}
    $Searcher = New-Object -ComObject Microsoft.Update.Searcher
    $results = $searcher.search("Type='software' AND IsInstalled = 0")
    $Results.Updates |
    ForEach-Object { $upids.Add($_.Title, $_.Identity.UpdateID) }
    $upids
    ([string](0..9|%{[char][int](32+("39826578846355658268").substring(($_*2),2))})).replace(' ','')
    What's new in Powershell 3.0 (Technet Wiki)

  • Is there a way to change the Windows Update service startup type on Windows Server 2012 R2?

    We have a number of newly built 2012 R2 servers that we have HP Operations Manager agent running on that monitors the status of several services and reports if they are "stopped". One of these services is Windows Update. Every day we
    get at least one alert saying:
    "Service "Windows Update" is not started. Current state is stopped"
    Checking the event logs shows that the Windows Update service stops, then a while later it just starts again. Not an error, just an information event.
    In Windows 2012 R2 the Windows Update service is set to "Automatic (Trigger Start)", where in previous versions we run (2012/2008R2) it would be set to just "Automatic" or "Automatic (Delayed Start)"
    I have come to understand that this behaviour is normal for Windows 2012 R2, and that Trigger Start services by design stop themselves after a period of inactivity. I was unable to find any info on how this works. Our client would like this to
    be changed and the Windows Update service stay running all the time, understanding that this impacts performance.
    Is there a way to change the Windows Update service in Server 2012 R2 to the old Automatic startup behaviour so that it stays running all the time instead of stopping and starting periodicall? There is no option to do this via the services mmc
    gui.
    So far I have tried:
    Removing the Triggers using the command: sc triggerinfo wuauserv delete
    This works temporarily, the service then shows as just Automatic in the services console, however if you restart the server or restart the service it goes right back to being Automatic (Trigger Start).
    Any kind of help would be appreciated.

    This one might help.
    Allow configuration of Automatic Updates in Windows 8 and Windows Server 2012
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Flash pro + recent windows update = HUGE FONT BUG!

    Hi,
    I jsut wanted to share my recent pain in you know where. Last week around wednesday Flash IDE (cs 5.5) stopped to display most custom fonts. I could create a text field (talking about the classic text field) and put a text there, however If i chose:
    - custom font (e.g. Futura, Helvetica...)
    - any anti-aliasing method (readbility, animation, custom)
    then the font was not visible at all in Flash IDE and even in published SWF.
    So after a day of reinstalling both software and system (Windows 7 pro x64) I found out that the problem is caused by recent windows update. Since I installed clean system and disabled automatic system update everything wokrs fine. This happend to my colleague as well with flash cs5 and Windows 7 pro x64.
    So to all of you flash people there - I just wanted to ask if you experienced same problem, so we know if this is just individual problem or common thing. For now I can only recommend not to download recent windows update until this issue is solved (if there is any).
    For adobe guys - did you get any report about this?

    check the many posts (and solutions) on this issue: 
    uninstall this update:  http://support.microsoft.com/kb/2753842

  • Windows Update Automatically download patches and install

    We have found that some of our servers are automatically downloading patches from Internet using Windows Update and installing. This is not how our environment is configured to be. Is there a way to know what all servers in environment are configured to
    download and install patches automatically from Windows Update using a script may be.
    Thanks
    Vish
     

    Hi Vish,
    Is there a way to know what all servers in environment are configured to download and install patches automatically from Windows Update
    We will need to open Control Panel and go to Windows Update to see if the machine is set to automatically install updates. Here is a screenshot below:
    Here is a scripting forum below:
    The Official Scripting Guys Forum
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
    Best Regards,
    Amy

  • GT70 2OD failure to configure Windows update

    I've tried a system restore and did a fresh Windows install. After doing a Windows update and restarting, it will day failure to configure Windows update reverting changes. It's done this 3 times now. Could it be something going on with the ssd? Mine is preconfigured with the 3 x 120 SSD super RAID0.
    I can system restore or refresh install, but after updating, same issue.

    Sometimes Windows update got some priority for programs,
    make sure some programs you should install in advance.

  • I cannot get windows updater to activate

    I cannot get windows updater to activate

    Hi,
    Before we go further in this issue, I would like to confirm what you mean by "I cannot get windows updater to activate".
    Please let us know more details of it as Andreas Molin and Arnav Sharma mentioned.
    Do you mean you cannot get Windows Update to run, you may try the following steps:
    1. Check Windows Update service's running status, make sure it is automatic. If not, change and start it. Please check the below mentioned services:
     a. Background Intelligent Transfer Service
     b. Cryptographic service
     c. Windows Update
    2. Your antivirus software may be conflicting with Windows Updates. You can test this by temporarily disabling your antivirus:
    Disable Anti-virus software: 
    http://windows.microsoft.com/en-US/windows7/Disable-antivirus-software
    3. Use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7
    http://support.microsoft.com/kb/929833/en-us
    Also, you may follow the steps from the link below to fix the issue.
    Windows Update Not Working: http://support.microsoft.com/kb/555989
    Hope it helps.
    Regards,
    Blair Deng
    Blair Deng
    TechNet Community Support

  • Maintenance Window & User Experience setting

    Hello,
    We're having a lot of issues regulating our Windows Updates, mind you I consider myself novice to intermediate when it comes to SCCM has I have been managing the SCCM software and update deployments for a year or so now at work.
    My question is the following:
    I have Software (Windows) Updates scheduled to be pushed to every workstation on the network on the First Monday morning of every month.
    All of them have an ASAP availability and installation Window so when comes 00:00:01 AM the patches are installed.
    My issue are the multiple reboots in case of update dependencies and or faulty update patches that won't go through until another reboot. Some time it could extend for days, so for the time being the reboots are not enforced.
    I would like to activate the reboots and from my understanding if a maintenance window is say set Monday 1AM to 6AM, all the updates with a deadline will be applied.
    Now i'm wondering two things: First, in the deployment properties in the "Write filter handling for Windows..." under "User Experience" section there is a checkbox that sites "Commit changes
    at deadline or during a maintenance window (requires restarts)". Does this mean that updates will be applied ASAP OR IF a maintenance window is defined it will overrule the deadline as soon as the deadline is over and apply the updates during
    the window and this has nothing to do with Business Hours set on the end-user client Software Center?
    Secondly, with ConfigMgr 2012 SP1 in "Assets and Compliance"
    when I right click the properties of computer group to set the actual maintenance window there's a check box
    "Apply this schedule only to task sequences",  I'm sure the answer is clear, but what exactly does it refer to, like imaging a computer through PXE boot... or?
    thanks!
    Eric

    UPDATE:
    I think I found the answer to my issue....
    In the deployment section under "Deadline Behaviour"
    "When the installation deadline is reached, allow the following activities
    to be performed outside of the maintenance window:"
                - Software updates installation
                - System
    restart (if necessary)
    Those options were checked...... so the reboot ensued anyhow. >;(
    thanks for all your help guys, much appreciated! 
    Eric

  • Radeon HD 6750M - Sudden drop windows 7 user experience index scores and performance in Battlefield 3

    Ok I have a strange problem regarding the performance of my graphics card Radeon HD 6750m in my bootcamped window 7 and maybe in OSX,here's what happened.
    Firstly I noticed this when going to load up Battlefield 3 which has been ruining fine on low settings since it first came out, but today i loaded the game as usual and when i started playing i noticed that the performance had completely bogged down to about 1 fps and had became unplayable so had a look at the video settings and they were all the same (set to the lowest possible) so i quit the game and restarted the game/machine a couple of time but no change, still completely unplayable for no apparent reason.
    So next a checked my Windows user experiance index number and notice that windows had detected changes in my hardware so i ran the test again, previously my scores were
    cpu: 7.5
    ram: 7.6
    graphics: 6.9
    gamming graphics: 6.9
    Hdd:5.9
    overall score 5.9
    the new test results came in and every things else had stayed the same apart from the two relating to the graphics had some how changed, the new results were:
    cpu:7.5
    ram:7.6
    graphics: 3.9
    gaming graphics: 5.7
    overall score
    I was completely confused how such a drop in performance could happen as i have not changed any of the hardware? is almost like the performance has halved relating to my gpu.
    I have tried reinstalling drivers but still no resolution
    I was wondering if anyone else had had this problem and what the possible causes could be and how a could fix this
    my hardware is:
    MacBook Pro 17-inch, Early 2011
    Processor  2.3 GHz Intel Core i7
    Memory  8 GB 1333 MHz DDR3
    Graphics  AMD Radeon HD 6750M 1024 MB
    hdd: 750 GB

    Yeah its all very strange, in my opinion it must be something to with the drivers. After I had relised that something had seriously changed with my hardware setup in the way windows recognizes the graphics card, I tried reinstalling different versions of the drivers for the AMD Radeon HD 750M and one version gave me a small improvement of about 0.2 in the windows user experience thing scale in the category that scores the graphics (cant remember which version the driver was was as it was a spur of the moment thing) so could be a driver problem but it was working fine using the preview drivers AMD provided on their web site before.
    I have also tried using the the original disk that bootcamp created during the install to re-install origianl divers (basically all the necessary drivers for windows to recognise hardware in Macbook Pro) and that never made any difference.
    This also happened before the windows update that you wrote about Cuziuzi (its was an optional update for the windows 64bit) because I installed this after battlefield 3 had died on me thinking it might resolve the problem.
    on a sidenote steam is refusing to lauch games on osx and i'am the process of re-downloading the game again to  try and fixes the issue (have only got L4D2).
    I am going to look into it tomorrow and try to figure out what the problem is and post some info about drivers specifications and some more clarifying information.
    Hopefully my GPU is not in the process of dying on me after the constant heat bombardment it has to endure thanks to Apples great design philosophy of visual aesthetics over functionality, fingers crossed Battlefield has not fried it!
    Also cziuzi what's ur hardware specs?

  • Lost all bookmarks in my user profile after latest microsoft windows update on 5/15/15

    Last night at 2am when I went to hibernate my computer as I usually do, I saw that there were some automatic windows updates to be installed. Since I have Windows XP and Microsoft has supposedly ceased support, I cancelled the hibernation and got on the internet to make sure that Microsoft was pushing out these updates and what they were for. Everything seemed kosher so I closed the internet and all of my programs, and proceeded to shut down the computer allowing the updates to install.
    Much to my chagrin this morning, I discovered that my user profile had essentially been wiped out. The user profile name was still there and the password still worked, but when I got in the whole profile had been restored to its initial settings. Most of my files that I had on the desktop are gone and when I launched FireFox, it had been reverted to its originally downloaded version (years ago) and all of my many, many bookmarks were gone. I did find some files in My Documents, but the bulk of the documents were not under my documents and appear to be gone.
    I did find some files in a TEMP folder and saved all of those. Fortunately I did back up my computer about a month ago, but stupidly did not back up my bookmarks. I do have a back up from a couple of years ago that I can retrieve, but everything since then appears to be gone. There are many files in the TEMP file that I cannot identify and am hoping and praying that my bookmarks are still in the midst of them. I did a search for Mozilla FireFox profiles through my dos prompt, but it only found a default profile that is likely associated with my admin user account that I generally do not work on for security purposes.
    I have searched all day on the internet for solutions with no luck. I would be most appreciative if anyone can provide some guidance that may be of help.
    Signed,
    Totally Mystified and ticked off at Microsoft

    Make sure to copy the profiles.ini as well if you copied the xxxxxxxx.default folder from that old Windows account.
    *http://kb.mozillazine.org/profiles.ini_file
    *http://kb.mozillazine.org/Profile_folder_-_Firefox
    *https://support.mozilla.org/kb/Recovering+important+data+from+an+old+profile
    *http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

  • Windows Update files: Security permissions has "unknown user"

    Ok, this is weird. I have 30 files added in a November Windows update with a compile date or add-to date of 11/21/14. If I look at one of the files. MsSpellCheckingFacility.exe.  I can see it is a legit file.
    https://www.virustotal.com/en/file/e9dcf987838e9a70fca4e1b1dda217bd1e309cd4f6bac47402120f76aac6edc7/analysis/
    However, the security permissions on the file are strange.  The user TrustedInstaller is the owner.  Now that seems to be typical when the file is a Microsoft updated file.  However, the file also has a user added that is unknown.
    user ? S-1-14-21
    Umm, why is this?  Its 30 files like this all REAL Microsoft files....all apparently part of the update.  All scanned against virustotal as being revised about that date/time.  Did Microsoft release an Update Build with files as a part
    of that build that had Microsoft users still attached to them?

    Hi!
    This machine is joined to a domain? This SID with parameter "-21-" indicates a domain. If so, it is needed to verify on local polices if any user had permission on domain workstations enforced by network Administration.
    But when researching by SID "S-1-14-21" we have no
    reference, as parameter "-14-" is not commonly used.
    From articles bellow, we can find how SID works and the well known SIDs:
    http://msdn.microsoft.com/en-us/library/dd302645.aspx
    http://technet.microsoft.com/en-us/library/dn743661.aspx
    As this is not a known SID, I suggest you to try to use the script on link bellow to determine who is the user account:
    http://blogs.technet.com/b/heyscriptingguy/archive/2004/12/03/how-can-i-determine-the-sid-for-a-user-account.aspx
    The problem can be a user account that had already deleted (this is why SID is not resolved to a name) or a problem on WMI component that is not able to resolve SID.
    If not successfull with article above, please post a screenshot on file permission in order to help you further.
    Cheers!
    Alan Martins

Maybe you are looking for