Windows Update disabled on Terminal Services Server

No matter which administrative account I use, local or domain, Windows Update displays a "Windows Update is managed by your system administrator" message.
I have attempted to use the /admin switch when connecting to the server.
I have executed change user /install at the command prompt.
I have attempted to run from a console directly attached to the server.
I still cannot apply the updates. The last update was in July 2014 and I need Windows Server 2008 SP2 installed for an application upgrade. I did not install or configure this server. The admin that did is no longer with the company and
is not available for support.
Any advice is appreciated.

I found the solution. There was a local Group Policy setting that had disabled Windows Update. The steps to correct are below.
Local Group Policy (gpedit.msc)
-        User Configuration
-        Administrative Templates
-        Windows Components
-        Windows Update
-        Remove access to use all Windows Update features.
It had been set to enabled. Changed to disabled and can now get and install updates.

Similar Messages

Windows Update stuck on downloading on Server 2012

Hi,
Using VMWare Workstation 9, I created new virtual machine where I installed Windows Server 2012 Standard edition from MDSN disk en_windows_server_2012_x64_dvd_915478.iso In the Server 2012 virtual machine, when I go to check for updates it says
there are important updates available so I click on Install Updates. It then just gets stuck on downloading updates for hours and nothing ever happens. Stuck at 0 KB total, 0% complete. I am able to access web pages using Internet Explorer
with no problem so the machine does appear to have connectivity to the Internet. If I go to help, click on "What can I do if I'm having problems installing updates?" and click on "Tab or click to open the Windows Update troubleshooter"
it says "Windows Online Troubleshooting Service is not enabled for this version of Windows." Any suggestions or ideas?
Thanks,
Greg

I had a similar problem with a guest Windows 2012 R2 running on a Hyper-V host. I went to the network adapter in device manager in the guest and I disabled the "Large Send Offload Version 2 (IPv4)" option. Why? Well, this was also an issue previously when
guesting Windows 2008 where the symptom was an error 80072ee2 when retrieving updates. See this post
http://blog.ronnypot.nl/?p=310 for details. Anyway, I tried this and it worked for me. Hung before the change, worked after.

Windows Update Failed Due To Services Stopped

Generally, the Windows Update issue can be caused by one of the following factors:
I. The Windows Update service has been stopped.
II. Corrupted Windows Update Temporary folder.
In order to narrow down the cause of this issue and resolve it, you can refer to the following steps. After finishing each step, please check the result again on the Windows Update website.
NOTE: Some third party programs can affect the Windows Update service. If you are running any third party applications such as Spyblocker, Internet or web accelerators (programs designed to boost the speed of the Internet connection), security or anti-virus programs (Norton, McAfee, etc.), I recommend we temporarily disable or shut them down and then try accessing Windows Update later. Please understand that you are disabling these programs only for the purpose of troubleshooting and you can re-enable these programs after your finish troubleshooting.
Step 1: Verify the relevant Windows Update services
I. Click the " Start " Button, in “ Search ” bar, type: " services.msc " (without quotes) and press Enter. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
II. Double click the service " Windows Update ".
III. Click on the " General " tab; make sure the " Startup Type " is " Automatic " or " Manual ". Then please click the " Start " button under " Service Status " to start the service.
IV. Please repeat the above steps with the " Background Intelligent Transfer Service " service.
You can also temporarily stop these services, restart the computer, and then start these services again.
Step 2: Rename the Windows Update Softwaredistribution folder
This problem may occur if the Windows Update Software distribution folder has been corrupted. You can refer to the following steps to rename this folder. Please note that the folder will be re-created the next time you visit the Windows Update site.
I. Close all the open windows.
II. Click the " Start " Button, click " All programs ", and click " Accessories ".
III. Right-click " Command Prompt ", and click " Run as administrator ".
IV. In " Administrator: Command Prompt " window, type in " net stop WuAuServ " (without the quotes) and press Enter.
Note : Please look at the cmd window and make sure it says that it was successfully stopped before you try to rename the folder.
V. Click the Start Button, in the " Start Search " box, type in " %windir% " (without the quotes) and press Enter.
VI. In the opened folder, look for the folder named " SoftwareDistribution ".
VII. Right-click on the folder, select Rename and type " SDold " (without the quotes) to rename this folder.
VIII. While still in the " Administrator: Command Prompt " window, type the command " net start WuAuServ " (without the quotes) in the opened window to restart the Windows Updates service.
Note : Please look at the cmd window and make sure it says that it was successfully started .
Clicking Kudos! Is a nice way to say Thank You if this helped you or resolved your problem. Also " Accept It As A Solution" so that others get a benefit from it..
- Aves..

thanks phillip, i did that, and i also did it again when the tech who
called me back asked me to do that. it did not work I don't know what
else to do,
i bought adobe package for school which has everything for creative
suite, can i reload disc and only reinstall adobe acrobat and reader?
those are the only two i am having issues with
btw, i scheduled two call back times, and after they called me back
from adobe, i was put on hold for a long time, when the person finally
answered, i was disconnected, tried a second attempt, it happened
again, no return phone call from them, i wasted over 3 hours last
night, with still no solution.

Windows update cannot run because service is not working.

Thinkpad E545, Windows 7 (64 bit) Professional. When I attempt to run Windows Update I get the message "Windows update cannot currently check for updates because the service is not working." Microsoft Fix-It does not help. I found a YouTube posted by Richard Lloyd and followed the steps: the Windows Update service is running, the Background service is running. Several web sources including Microsoft point to an Intel RST driver. I downloaded this driver g1io15ww.exe and ran the file, but still no joy. A solution would be welcome, and Happy Thanksgiving. -- Alan

Hello and welcome,
Your laptop is AMD-based (IIRC) so an Intel driver isn't going to help.
If the update issue is caused by the AHCI driver incorrectly reporting physical sector size (that's what those IRST reports are about) it might be fixed by installing the correct AHCI driver for your laptop:
http://support.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-edge-laptops/thinkpad-edge-e5...
There are other reasons for Win update failures, so this isn't a sure thing. Worth a try, maybe. I've personally only seen this issue with Intel hardware.
Z.
The large print: please read the Community Participation Rules before posting. Include as much information as possible: model, machine type, operating system, and a descriptive subject line. Do not include personal information: serial number, telephone number, email address, etc. The fine print: I do not work for, nor do I speak for Lenovo. Unsolicited private messages will be ignored. ... GeezBlog
English Community Deutsche Community Comunidad en Español Русскоязычное Сообщество

Unable to scan and install windows updates on Win 2008 R2 server

I've encountered some of my win 2008 servers are unable to scan and receive windows updates from SCCM 2012. Browse through the logs and found some error code related to
0x80244023. Excerpt from the WindowsUpdate and WUAHandler is as below. Searched the net and found some workaround which is to rename the registry key
WinHTTPSettings to WinHTTPSettingsx (by adding x at the end of the string)
under HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Internet Settings -> Connections.
I've did just that on the effected servers and after running again the Software Update Scan Cycle action, it is now able to scan and install the updates. My questions is, based on you guys experience, is there any repercussion (apart from enable to install
software updates) that I could encounter in changing the registry key value WinHTTPSettings?
WUAHandler
<![LOG[Scan results will include all superseded updates.]LOG]!><time="04:04:40.982-480" date="09-20-2014" component="WUAHandler" context="" type="1" thread="872" file="cwuahandler.cpp:2913">
<![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="04:04:40.982-480" date="09-20-2014" component="WUAHandler" context="" type="1"
thread="872" file="cwuahandler.cpp:2916">
<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="04:04:40.988-480" date="09-20-2014" component="WUAHandler" context="" type="1" thread="872" file="cwuahandler.cpp:579">
<![LOG[Async searching completed.]LOG]!><time="04:05:06.262-480" date="09-20-2014" component="WUAHandler" context="" type="1" thread="8112" file="cwuahandler.cpp:2068">
<![LOG[OnSearchComplete - Failed to end search job. Error = 0x80244023.]LOG]!><time="04:05:06.263-480" date="09-20-2014" component="WUAHandler" context="" type="3"
thread="872" file="cwuahandler.cpp:3064">
<![LOG[Scan failed with error = 0x80244023.]LOG]!><time="04:05:06.263-480" date="09-20-2014" component="WUAHandler" context="" type="3" thread="872" file="cwuahandler.cpp:3520">
WindowsUpdate
2014-09-20 06:04:03:506 552 634 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2014-09-20 06:04:03:506 552 634 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
http://"SCCM Server":8530/ClientWebService/client.asmx
2014-09-20 06:04:25:166 552 634 PT WARNING:
GetConfig failure, error = 0x80244023, soap client error = 10, soap error code = 0, HTTP status code = 504
2014-09-20 06:04:25:166 552 634 PT WARNING:
PTError: 0x80244023
2014-09-20 06:04:25:166 552 634 PT WARNING:
GetConfig_WithRecovery failed: 0x80244023
2014-09-20 06:04:25:166 552 634 PT WARNING: RefreshConfig failed: 0x80244023
2014-09-20 06:04:25:166 552 634 PT WARNING: RefreshPTState failed: 0x80244023
2014-09-20 06:04:25:166 552 634 PT WARNING: Sync of Updates: 0x80244023
2014-09-20 06:04:25:166 552 634 PT WARNING: SyncServerUpdatesInternal failed: 0x80244023
2014-09-20 06:04:25:166 552 634 Agent   * WARNING:
Failed to synchronize, error = 0x80244023
2014-09-20 06:04:25:170 552 634 Agent   * WARNING: Exit code = 0x80244023
2014-09-20 06:04:25:170 552 634 Agent *********
2014-09-20 06:04:25:170 552 634 Agent ** END ** Agent: Finding updates [CallerId = CcmExec]
2014-09-20 06:04:25:170 552 634 Agent *************
2014-09-20 06:04:25:170 552 634 Agent WARNING:
WU client failed Searching for update with error 0x80244023
2014-09-20 06:04:25:171 5752 de4 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = CcmExec]
2014-09-20 06:04:25:172 5752 de4 COMAPI   - Updates found = 0
2014-09-20 06:04:25:172 5752 de4 COMAPI   - WARNING: Exit code = 0x00000000, Result code = 0x80244023
2014-09-20 06:04:25:172 5752 de4 COMAPI ---------
2014-09-20 06:04:25:172 5752 de4 COMAPI -- END -- COMAPI: Search [ClientId = CcmExec]
2014-09-20 06:04:25:172 5752 de4 COMAPI -------------
2014-09-20 06:04:25:172 5752 de4 COMAPI WARNING: Operation failed due to earlier error, hr=80244023
2014-09-20 06:04:25:172 5752 de4 COMAPI FATAL:
Unable to complete asynchronous search. (hr=80244023)
2014-09-20 06:04:30:171 552 634 Report REPORT EVENT: {37DD5321-4FD5-4024-9C84-1FB9C04D4A5A} 2014-09-20 06:04:25:169+0800 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80244023 CcmExec Failure Software
Synchronization Windows Update Client failed to detect with error 0x80244023.

Hi
If SCCM is setup correctly and your boundaries are correct then once you deploy updates the agents will pick them up.
Also make sure you SUP role has the FQDN set. Lastly if you are using port 8530 make sure it is open.
Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Windows Updates from Internet or Wsus Server

Hi
We have licenced software for windows 2008r2,windows 7and office.
We are trying to install the update from Internet or from Sus server but we are not going through
Devdatta

Hi Devdatta,
What's the meaning? Did you want to install the Windows update for your computer?
You can obtain the updates from Windows Update:
Windows Update
http://windows.microsoft.com/en-IN/windows7/products/features/windows-update
How did you get the updates, download from Internet Explorer manually?
What's the error message or symptom when you attempt to install them?
Meanwhile, I suggest you refer to this article to fix your problem.
Troubleshoot problems with installing updates
http://windows.microsoft.com/en-in/windows/troubleshoot-problems-installing-updates#1TC=windows-7
Karen Hu
TechNet Community Support

Windows update disabled by administrator (Build 9879)

After installation I got this:
Clicking more information game me this:
Only thing I can think that would block an admin from admin tasks was the temporary addition of HyperV, followed by it's removal....

After installation I got this:
Clicking more information game me this:
Only thing I can think that would block an admin from admin tasks was the temporary addition of HyperV, followed by it's removal....
Windows Automatic Updates started since the first Win 10 TP version, 9841.
It is by design. MS wants it that way.
excerpt..........
Notes
Windows Update will be set to automatically install important updates as they become available. You won’t be able to turn off automatic updates in
Windows Technical Preview.
http://windows.microsoft.com/en-us/windows/preview-faq#faq=tab4

Windows Time source resets after service/server restart

We have two completely separate domains. Our main domain has 4 DCs: the PDCe is looking to an outside source for its time source and the other 3 DCs are looking to the PDCe for their time source. The second domain, our DMZ, is setup the exact
same way. The PDCe is looking to an outside source for time and the other 3 DCs are looking to the PDCe for their time. If the Windows Time service is restarted or the server is restarted (during patching, for example), the time source changes
from the outside address to "Local CMOS Clock". From there, everything else will get thrown off. And now that I think of it, they might also revert to "Local CMOS Clock" after the service is restarted.
I configured the PDCe using the following command, which completes successfully:
w32tm /config /manualpeerlist:0.pool.ntp.org /syncfromflags:manual /reliable:yes /update
I can then run w32tm /query /status and confirm the setting is correct, but if I do the recommended "net stop..." and "net start..." commands, it will revert to "Local
CMOS Clock". If I leave it alone and the server reboots, it will again revert. This problem does not exist in our main domain. I have the appropriate rights and I don't see anything in the event logs that would indicate what the problem
is. Thoughts?
Chris

so the first thing is that only your PDCe should be going out to the internet (or another reliable NTP source) to get the time and that's done with:
w32tm /config /manualpeerlist:0.pool.ntp.org /syncfromflags:manual /reliable:yes /update
all your other DCs then go to the PDCe to get their time and we do that with:
w32tm /config /syncfromflags:domhier /update
so when you say you tested it on "test DC", you need to ensure the right settings are being pushed relevant to that DC's role and I'm not really certain about this test environment you have here
reading up on this, it all keeps going back to VMs doing time sync with the host, GPOs, scheduled tasks, or startup scripts
you can check the Systems event logs though, there will be messages in there stating why it reverted back to local cmos. it might do it if it can't reach the time source you specified and that part is normal but you need to check the logs first. even a successful
time sync message will help eliminate some of the causes
I think unregistering/registering the service starting with your PDCe should make it stick, as long as it can actually communicate with "0.pool.ntp.org". to verify this and to make sure UDP port 123 is open, run "w32tm /stripchart /computer:0.pool.ntp.org"
- if you get a time chart then communication is fine but if you get something else then you may have problems hitting that source and it's reverting back to cmos.

Installation issues with JRE, Auto Update, win 2008 and terminal services

Hello,
We have seven Windows 2008 servers running Terminal Services in one TS farm. I have approximately 600 users accessing these servers. We have a need for the Java JRE. The JRE is to be installed on each of the seven servers since the user has no input into which server they log on to (round robin / load balancing)
There are several issues that have occurred with this installation. I install the JRE on each of the servers when there is no one logged on. I turn off both of the update features while installing as administrator. When the users log on, however they are at some point prompted for an admin password to update Java. The users have no need to update java as all updates will be performed by the system admin. Additionally, when the user runs any app that uses the Java plug-in, they get a folder put on their desktop labeled Sun.
Are there special instructions for installing Java when using Terminal Services and Windows 2008? As you can well see, 600 calls to the help desk asking about this update popup is not productive and accessing 600 users accounts and turning off the auto update on an individual basis is not practical. The user cannot disable this update anyway. They options are grayed out at the user level.
If this is not the proper forum to ask these question, please forward this message to the proper department or let me know who I should/could contact to resolve these issues.
Best regards,
Bob

thomashmaine wrote:
I mean to only explain 1 enviornment. We have a windows 2008 terminal server. It has JRE 1.6.0_07 (32bit) install on it. The users use this server for Office Apps and to Access our software which is web based and requires a JRE to be able to work.
When the users login the terminal server picks up there local timezone from the machine they are logging in from and apply's it to there terminal server session. The problem is when the jre is launched it is picking up the server timezone, not the timezone from the users session(which is different).
Does this clarify it?Nope.
Either the user is running the jre or the server is. Or maybe both. Seems like all of those are possible from your explanation.
It doesn't matter what the jre is running. What matters is who runs the jre.
Best I can suppose your situation is as follows.
- The server, not a user, is running a jre with one or more applications.
- The users use something, probably a browser, to access that server app (it doesn't even matter that it is java in terms of what the users are doing.)
If and only if that is your situation then you MUST pass information from the browser session to the server (java or anything else for that matter) and you MUST use that information in the server code to display time information.

Server 2008 R2 Hyper-V guests lose NIC after recent Windows Update

Hi Folks,
I have a Windows 2008R2 Hyper-V server with 20 guests. They have been using a standard network adapter for 2 years. Last night after running this months windows updates on a number of the guest VMs, each running Windows 2008R2 some of these
adapters disappeared. That is they are not visible in "network adapters" on the guest VM, the static IP configuration is gone and instead the VM had a dynamically assigned IP shown in IP config to a Microsoft VM bus network adapter #2.
The other machines that didn't have updates run on them and have adapters visible show a Microsoft VM bus network adapter.
I don't see anything obvious in event viewer.
I've done the basic "reinstall integration services" but it still doesn't show a configurable network adapter.
I've uninstalled the windows updates and "reinstalled integration services" no luck.
Does anyone have recommendations on next steps?
I'll update the post as I move forward.
Thanks,
Ivan
Ivan

Hi,
Could you try to show the hidden device in the device manager, you can refer the following article to show the hidden device:
How to Find a Lost, Missing, Hidden or Removed Network Card (NIC) or Other Device and Even Remove it
http://blogs.technet.com/b/danstolts/archive/2010/09/25/how-to-find-a-lost-missing-hidden-or-removed-network-card-nic-or-other-device-and-even-remove-it.aspx#sthash.z6jSu8tZ.dpuf
If you can see the lost NIC adapter then try to remove it uninstall it then rescan the device to see if there have the virtual NIC adapter found.
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Run windows update against specific wsus server

Is it possible to run windows update from a specific wsus server using
cmdline or powershell? Eventually I am trying to do something with powershell but without using the WSUS API for versions 4 and above.
Thanks

Is it possible to run windows update from a specific wsus server using cmdline or powershell? Eventually I am trying to do something with powershell but without using the WSUS API for versions 4 and above.
Perhaps you could elaborate on the actual problem you're trying to solve and we can suggest appropriate and viable solutions for that problem?
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

SSGD vs. Windows Terminal Services

I'm using one Windows Terminal Services server with 20 clients in my office. My question is, what advantages (ands disasvatages such as serial port forwarding) can I expect from using SSGD?
Thanks in advance.
Regards!

I'm using one Windows Terminal Services server with
20 clients in my office. My question is, what
advantages (ands disasvatages such as serial port
forwarding) can I expect from using SSGD?
SSGD will also use the Terminal Services. The advantage you get is, that you can deposit the access also from the outside (= Internet) and not only to the inside.
Markus

How to disable the windows update message "Windows update hasn't been able to check for updates for the last 30 days"

Hi,
We work on a domain that uses Symantec Management console to administrate our patch enviroment. We have windows updates disabled. But our Windows 8 machines get this message once a month
"Windows update hasn't been able to check for updates for the last 30 days"
Just wondering if anyone knows which GPO to use to disable this setting as I have been unable to find it.
Thanks

Hi，
You can turn off the message by GUI in Control Panel\System and Security\Action Center, in the right pane, click "Change Action Center settings", then untick the "Windows Update" option.
For GPO, you can disable all balloon notifications:
User Configuration \ Administrative Templates \ Start Menu and Taskbar\Turn off all balloon notifications
Or remove Action Center icon itself
User Configuration\Administrative Templates\Start Menu and Taskbar\Remove the Action Center icon
And I haven't found a GPO to turn on\off a specific message mentioned in the action center, but the setting for the message is related with registry key under
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Action Center\Checks
but the value under the key is binary, hard to control, if you have interest, you can export the key from a preference pc, then deploy the GPO via
User Configuration > Preferences > Windows Settings > Registry
Yolanda Zhu
TechNet Community Support

Uag server windows update failes with code Code 80072EE2

I am trying to do a windows update of my uag 2010 server, but keep getting an error of Code 80072EE2.
jason

Hi,
Could you try to set a winhttp config with this command : netsh winhttp
You can import your IE configuration or use a dedicated proxy.
More information about netsh winhttp on
http://technet.microsoft.com/fr-fr/library/cc731131(WS.10).aspx
Have a nice day,
Alex
Regards,
GIRAUD Alexandre MVP Forefront
[email protected]
GIRAUD Alexandre - MVP Forefront France http://www.alexgiraud.net/blog

Only administrators have permission to add, remove, or configure server software during a terminal service remote session.

Hello
I have been trying to install Office 2010 Pro Plus onto a Server 2003 Terminal Services server. We have an OVS license and I have followed all the procedures (and variations) noted in
http://technet.microsoft.com/en-us/library/ff506201.aspx . However, we still get the error message 'Only administrators have permission to add, remove, or configure server software
during a terminal service remote session.' when users logon via an RDP session. If they logon locally, the applications start without problem. I have tried the manual and .msp setup, installed via the 'Add\Remove Programs, install using the command line with
'Change User /install' and then 'Change User /execute'. None of this stops the message and allows the users to use Office via TS.
Is there a step missing from the Technet site that I need to get the users working?
Any ideas would be really appreciated.
Thank you

This has not fixed my issue. I still get the message "Only administrators have permission to add, remove, or configure server software during a terminal service remote session". If I add the user into the local admins group. When I login as the
user in question or any user onto the server in question the message above appears.
When I run Lync from the shortcut on the remote drive it works. But when I run it from the desktop and start menu it displays the above error. I spoke to Ctrix who have said that it is a permissions issue. I have checked and all permissions seem to be the
same.
Please can you help?
Kind Regards, PenDraKon

Windows Update disabled on Terminal Services Server

Similar Messages

Maybe you are looking for