Windows Update Service keeps turning back on

I have Windows Update service stopped and Disabled in my image. It doesn't turn back on upon every reboot I attempt.     
However, once I use it in an OSD to apply image and carry out my OSD task sequence, every single time the Windows Update service now shows as "Started" with Startup Type configured as "Automatic (Delayed Start)". 
I'm not showing anything in my setupcomplete.cmd that indicates this server should be turned on. I'm not seeing anything in OSD that indicates this should be turned on.
maybe I am missing something though. Is SCCM configured to turn services back on for me or should I be looking somewhere else to see why? 
There's no GPO for Windows Update in the AD I'm on either 

I came across this, is this legitimate? Sccm 2012 R2 Cu4
http://blogs.technet.com/b/configurationmgr/archive/2013/02/05/support-tip-after-disabling-the-windows-update-service-it-automatically-becomes-enabled-the-next-day.aspx
So this was what was enabling our Windows Update Service every day. To prevent this from happening we can exclude clients from remediation via a Registry change on the client:
1.      Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\CCM\CcmEval\NotifyOnly. 
2.      Change the value to True
When set to True, the client computer will not automatically remediate any problems that are found, however you will still be alerted in the Monitoring workspace
about any problems with this client. More information and alternate methods for disabling remediation on selected machines can be found athttp://blogs.technet.com/b/seanm/archive/2012/12/20/configuration-manager-client-health-disable-automatic-remediation-for-selected-machines.aspx
When set to False (the default setting), the client computer will automatically remediate problems when they are found and you will be alerted in the Monitoring workspace. For more information see How
to Configure Client Status in Configuration Manager at http://technet.microsoft.com/en-us/library/hh338432.aspx.
Yes that's the blog entry I have linked to. It will do what you require.
Cheers
Paul | sccmentor.wordpress.com

Similar Messages

  • Windows Update Service Enabled after OSD

    OSD build and capture of win7 x64 with Windows Update
    service disabled, enables itself after TS/Imaging process.  Anyone know why this happens or how I can permanently disable...it is for a public facing machine I do not wish to ever update.  Turning off automatic updates doesn't seem to do the trick...it
    still updates periodically when reboot.  Thanks in advance!

    I'm pretty sure it's started by the client. 
    Why not create some maintenance windows for your devices for updates and thaw the machines during the MW? You can therefore keep your machines patched.
    Yeah I've had the pleasure of Deep Freeze before.
    Cheers Paul | http://sccmentor.wordpress.com

  • Is there a way to change the Windows Update service startup type on Windows Server 2012 R2?

    We have a number of newly built 2012 R2 servers that we have HP Operations Manager agent running on that monitors the status of several services and reports if they are "stopped". One of these services is Windows Update. Every day we
    get at least one alert saying:
    "Service "Windows Update" is not started. Current state is stopped"
    Checking the event logs shows that the Windows Update service stops, then a while later it just starts again. Not an error, just an information event.
    In Windows 2012 R2 the Windows Update service is set to "Automatic (Trigger Start)", where in previous versions we run (2012/2008R2) it would be set to just "Automatic" or "Automatic (Delayed Start)"
    I have come to understand that this behaviour is normal for Windows 2012 R2, and that Trigger Start services by design stop themselves after a period of inactivity. I was unable to find any info on how this works. Our client would like this to
    be changed and the Windows Update service stay running all the time, understanding that this impacts performance.
    Is there a way to change the Windows Update service in Server 2012 R2 to the old Automatic startup behaviour so that it stays running all the time instead of stopping and starting periodicall? There is no option to do this via the services mmc
    gui.
    So far I have tried:
    Removing the Triggers using the command: sc triggerinfo wuauserv delete
    This works temporarily, the service then shows as just Automatic in the services console, however if you restart the server or restart the service it goes right back to being Automatic (Trigger Start).
    Any kind of help would be appreciated.

    This one might help.
    Allow configuration of Automatic Updates in Windows 8 and Windows Server 2012
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • My iPhone 4S keeps turning back on if it isn't plugged into a charger?

    I bought my iPhone 4S recently. When I try to turn off my iPhone it keeps turning back on. The only times it stays turned off is when I have it plugged into a charger. I have tried holding the sleep/wake button and sliding the shut off tab and also holding the home button & sleep/wake button at the same time while unplugged from the charger; on both occasions it has turned back on without me doing anything. I would just like to know what is happening and also if they're is a solution for it.

    Hi, I have the same problem. I tried to call them but they tried to make me pay $99 only to talk to them, so I dicided not to talk to them. Btw, did you get the solution for that? Thanks

  • Windows Update Service Disabled - Error 80070422

    Hi,
    On Windows Vista Ultimate SP1, when I go to Windows Update I see a "Check For Updates" button. When I click it I get an 80070422 error and "Try Again" button which does not work.
    I have tried all that is explained in Help on this error, but it's still not working. Let me write in more detail: I opened "Administrative Tools", went to "Services", "Windows Update" service is disabled. I set the "Startup Type" to "Automatic", click on Apply and then I click the "Start" button to start the service. I get an error: 1058: "Windows could not start the Windows Update service on Local Computer", "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it".
    I downloaded "WindowsUpdateAgent30-x86.exe" and installed it, hoping that the problem will be fixed, but no luck.
    I read somewhere on this forum that a user faced a similar problem and searched in "Windows\System32" for "wu*.*" files and changed the security settings for all of them to allow SYSTEM and Administrators full control and re-registered through "regsvr32" all of the .dll files, but, after doing all of these I still had no luck.
    My Windows Update still displays the error 80070422 and when I try to start the Windows Update service I get the error that the service cannot be started and it always sets itself on "Disabled", no matter what I do.
    Could someone please help me with this problem? I really don't know what else to do.

    Wow, great!
    I ran the tool that you mentioned and the virus in question was detected as: Trojan.Vundo
    Maybe the logs will help some others, too: Here's the log on the first scan:
    Malwarebytes' Anti-Malware 1.14
    Database version: 808
    8:40:22 PM 5/31/2008
    mbam-log-5-31-2008 (20-40-22).txt
    Scan type: Full Scan (C:\|D:\|)
    Objects scanned: 169731
    Time elapsed: 42 minute(s), 47 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 1
    Registry Keys Infected: 9
    Registry Values Infected: 1
    Registry Data Items Infected: 1
    Folders Infected: 0
    Files Infected: 8
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    C:\Windows\System32\byXOHaBU.dll (Trojan.Vundo) -> Unloaded module successfully.
    Registry Keys Infected:
    HKEY_CLASSES_ROOT\CLSID\{1449fa3b-f8a5-40ec-87da-707e80637ddd} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1449fa3b-f8a5-40ec-87da-707e80637ddd} (Trojan.Vundo) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{663656df-6bae-460c-a612-8133df519346} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{663656df-6bae-460c-a612-8133df519346} (Trojan.Vundo) -> Quarantined and deleted successfully.
    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\byxohabu  -> Quarantined and deleted successfully.
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    C:\Windows\System32\byXOHaBU.dll (Trojan.Vundo) -> Delete on reboot.
    C:\Users\Shere Khan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LK0KREDB\kb516107[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\fccywwts.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\gEwtTLFy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\yayvSiHb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\_Shere_Quarantine\fmsnvygd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\byXnMghG.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\byXPfgfe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    Here's the log on the second scan, after a restart:
    Malwarebytes' Anti-Malware 1.14
    Database version: 808
    9:48:01 PM 5/31/2008
    mbam-log-5-31-2008 (21-48-01).txt
    Scan type: Full Scan (C:\|D:\|)
    Objects scanned: 168808
    Time elapsed: 56 minute(s), 31 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 2
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    (No malicious items detected)
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    C:\Windows\System32\byXOHaBU.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Windows\System32\dqhreobq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    On the third scan, no other infections were found. The files and locations and one or two registry entries are similar to what I suspected was not allright, so I guess the (right) virus has been found and eliminated. Have enabled Java in FireFox and everything seems fine, haven't touched Internet Explorer just to be on the safe side so I can't say anything about that, but everything looks allright. Seems this was the problem. Thanks again, mate, your post was a life saver.

  • ConfigMgr 2012R2 / Software Update feature - Windows Update Service on clients

    Hi,
    ConfigMgr 2012R2 / Software Update feature.
    Is it necessary that the Windows Update Service on clients is running???
    Thanks

    It doesn't have to be running Automatic if that's what you're asking, but it shouldn't be
    Disabled either. The ConfigMgr client will trigger it to scan for updates. For a nice documentation about the whole process see:
    http://blogs.technet.com/b/configmgrdogs/archive/2014/06/30/configmgr-2012-windows-update-client-process.aspx
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Windows Update Service

    Hi,
               I am facing a strange issue, windows update service is starting automatically even if i set to manual or disabled. I have no clue where to track it down how it is getting start please advice.
    Windows 2008 R2 servers.
    GPO not configured for windows update.

    Hi,
    >>I am facing a strange issue, windows update service is starting automatically even if i set to manual or disabled.
    When did this begin to happen?
     Did we install some new apps or services? Based on my understanding, this may be related to some other services or apps.
    Best regards,
    Frank Shen

  • Automatic Updates Keep Turning Back on When Turned Off

    When I turn off the automatic updates for my apps in my settings and later come back to it, it is turned back on. I have tried rebooting several times after turning it off but it is always still on. How can I fix this? (iPhone 5s, iOS Version 8.0)

    Hey prash,
    Welcome to the forums.
    This sounds like a software issue. Try backing up your device then reload the software: 
    How to perform a clean reload of the BlackBerry Device Software for Windows
    -SR
    Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
    Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

  • I have an iPhone 4 and have upgraded to iOS 6.  Based on posts regarding battery life after this update, I want my setting for "Use Cellular Data for" iCloud Documents to remain off.  However, it keeps turning back on...can I avoid this?

    I also wanted to note that this setting goes back to On even if I have not turned off the phone...but it also does this when the phone is turned off and then back on.

    I am seeing the exact same thing on iOS 6.0.1 on my iPhone 4 and iPhone 4S.
    Steps to reproduce:
    In Settings:General:Celluar, check to be sure the following is off:
    iCloud Documents
    iTunes
    Passbook Updates
    Reading List
    Check back to the same screen after 5 minutes (while not on Wifi) and iCloud Documents is back on.
    It's burning through data like mad.
    I know I could kill iCloud on my devices or turn off Cellular data, but neither is a solution.
    Apple, are you aware of this? I think most people assume that users just don't know how to turn this off. That's not the case, it's coming back on by itself.

  • T510 Mouse and Keyboard stops working with Windows Update - unable to roll back, happened twice

    My mouse has been working fine for a while but it stopped working followed by the keyboard, I put it down to a Windows update but because Windows 7 keeps bluescreening on a restore point I couldn't recover.  I contacted Lenovo got the rebuild disc for my machine, completely rebuilt it, all working fine, then after 2 days same issue, mouse stopped, keyboard stopped, restore points make no difference.  Does anyone know what windows update is causing this and if there is a fix aside from rebuilding, I can't keep doing this and I need to understand the cause really, not had it with a laptop before.  Gone back to using my old laptop until I can get it sorted.  Does anyone have any ideas?

    I installed the latest drivers via windows update and got the touchpad back, rebooted, it went again.  Netiher the trackpoint or touchpad work.  I then thought rather than focus on drivers check the bios.  I disabled the trackpoint in the bios, still neither works, however if I disable the touchpad in the bios and enable the trackpoint, the trackpoint does consistently work.  I can't explain why the touchpad worked after a touchpad update but now fails, the ultranav driver is installed but if both are enabled in the bios it say it isn't installed, if the trackpoint is enabled it tells me I need to enable both so it clearly knows it's there.  What's curious is that this doesn't happen on the complete clean IBM build.  I can't not turn off windows updates, I'm a developer so Ioad the laptops up with a vast variety of software and I need many of the windows update fixes, either way I am surprised they are conflicting with the touchpad so dramatically.  I can't see it being a virus I'm using two layers of protection and if I blow the machine away and installed the updates via an .iso image (so it's never connected to anything else), I can replicate the problem.  It's feasible it's another piece of software causing the conflict.  Any one have any idea what could be going on or seen it before?

  • Calendar notifications keep turning back on

    I like to have all calendar notificatins turned off, but every time I restart my computer (iMac 27" late 2012 with Yosemite) I find that calendar notifications are all turned back on - alerts, notificationsin lock screen, notificatin center, badge app, playing sound.  I turn everything off and all works as it should until I restart my iMac and all the calendar notifications turn back on by themselves.  Can anyone help with advice for me to keep the calendar notifications off?  It's really annoying to have to change the settings every time I restart.
    Thanks!

    Have you updated to 10.10.1 yet?
    10.10.1 Update

  • How to block Windows update services?

    We have a need to prevent windows update traffic to flow thru our network on certain dates. Basically this type of traffic will clog our mpls bandwidth preventing other type of traffic to flow. We are using up to some part QoS on out routers but it not working all the time. Eg, we put in ip address of one windows update server but updates are pulled of the other, then you enter second ip and updates are coming from third, etc.
    I would like to explore other, a bit more controllable options utilizing Cisco's technology: ASA 8.4, IronPort WSA.
    In summary, to create a traffic policy, not specific to IP addresses, that will kick in at certain date/time, be on for certain period of time and turned off after (automatically).
    Any ideas, suggestions how to tackle this issues would be greatly appreciated.
    Regards,.

    In WSA, go to Web Security Manager/Define Custom Time ranges, and create a time range, call it "Workday", set it for the time you want to block.
    Create a new Access Policy, set the identies to All Users, click Advanced at the bottom.
    Set the time range to the Workday time range.
    Set the user agent to the Microsof Windows Updates (Its under Common User Agents/Others)
    In the Protocols section of the policy, set it for "Define custom settings", and tell it to http, ftp, etc.
    There are other ways to do it, creating an Identity for example, and then creating a policy for that, but this should work...

  • ITunes 11 - "Show iTunes In The Cloud purchases" keeps turning back on

    I have repeatedly turned off "Show iTunes in the Cloud purchases" in iTunes 11, and then when I relaunch iTunes, it is checked again!   Not only that, but when it launches with that feature turned back on, it then marks pretty much any TV show I have purchased via iTunes as watched, even if they are unwatched.    Any suggestions?

    hello,
    unfortunately it is a huge bug....itunes store and itunes screw up the tv shows. many users reported this already here. now we have to make apple aware of the issue. go open a support ticket for this and please also send feedback within itunes, reporting the bug !
    lets keep hopes up for a quick solution.
    chris

  • My Windows service keeps turning itself off

    I've got an Xserve running Tiger and every once in a while, the "Windows" service (which allows PCs to connect to the file share) turns itself off. Any idea why?
    Mike

    Try:                                               
    - iOS: Not responding or does not turn on           
    - Also try DFU mode after try recovery mode
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
    - If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
    - Try another cable                     
    - Try on another computer                                                       
    - If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
      Apple Retail Store - Genius Bar              

  • Today after attempting to install latest MS windows updates (Service Pack 2) my Touchsmart has faild

    My HP Touchsmart has failed today to successfully upload an MS service pack update today for Windows 7 and has gone into a loop of trying to install and then revert the update. The machine is unserviceable now. What can you suggest to get me going again. I am sending this message from another machine.
    Laurence Browne

    Hi Laurence,
    Please have a look at the following page:
    http://h10025.www1.hp.com/ewfrf/wc/document?docname=c01835735&cc=us&lc=en&dlc=en&product=4176682&tmp...
    Scroll down to halfway the page where it says "Restoring when Windows 7 cannot start normally". This will do a Microsoft System restore to an earlier time so for example to yesterday. You will be able to select a restore point in a list which you will get during this process. Go back to for example 1 day before this problem occurred.
    Greetings
    Philippe
    Clicking the "Kudos star" to the left is a great way to say thanks!
    When your problem has been solved, accept the solution by clicking the "Accept as Solution" button to help other members in the future!

Maybe you are looking for

  • Can't create Application Role in Obiee 11g Enterprise Manager

    Hi All, I was working on obiee11g enterprise manager. I created some of the groups in weblogic console. Now I wanted to create application roles in enterprise manager for those groups. I am surprised that, the "*Create*" button is inactive on the app

  • Multiple records in BPM using Switch

    Hi Frnds,               I was doing File to RFC to Webservice sceanrio using multiple records. For that i have used ReceiveTransformation-Block(ForEach)-Send Sync-ContainerEndBlock-TransformationSendTransformation(Multimapping)-Block-switch-sendsync-

  • IOS 8 AirPrint Bug: Email printing is slow. iOS 7 works fine.

    I have been troubleshooting the AirPrint bug for several days and could not find a solution for this. Whenever I print an email (even an almost blank email), it takes about 25 - 30 seconds before the print job is sent to the printer, after that the p

  • How can I use the MacBook Pro webcam with Windows XP apps under Parallel?

    Thank you in advance for your help with this matter. I have a MacBook Pro and I have just installed Parallel with Windows XP. I would like to use the webcam that comes with the laptop for applications that run under Windows XP (ex.: PalTalk). The app

  • Camera not working - Thinkpad L520

    Can anyone help me to get the camera working again on my Thinkpad L520 afrer a disappointing Windows 8 upgrade.? I have re-installed Windows 7 Pro and downloaded the drivers from the lenovo site, but the camera just doesnt work.