Clients rebooting prematurely???

hi there,

got odd 1 here or maybe setup wrong?

scenario -
wsus server setup , used gpo set following last night:

allow au immediate install (for no-intrusive updates explanation states)
automatic detection interval enabled 10 hours
configure au to: auto download , scheduled install every day @ 3am.
specify intranet server (obviously :))

ok thought myself, come in today , 2 machines restarted following updates during working hours, 1 prompted 5 minutes shutdown etc... other can assume did same user locked system , went away bit, come , had done it. below excerpt second pc's windowsupdates log file:

2008-06-03    10:49:15:111    1076    bd4    au    setting au scheduled install time 2008-06-04 02:00:00
2008-06-03    10:51:47:431    1076    758    report    uploading 1 events using cached cookie, reporting url = http://server/reportingwebservice/reportingwebservice.asmx
2008-06-03    10:51:47:447    1076    758    report    reporter uploaded 1 events.
2008-06-03    10:53:38:321    1076    698    au    au invoking rebootsystem (onrebootnow)
2008-06-03    10:53:38:399    1076    698    misc    warning: sus client rebooting system.

does know why scheduled correctly , went , rebooted anyway???

thanks,

golderm, how options works:

reschedule automatic updates scheduled installations - this policy specifies amount of time automatic updates should wait after system startup before proceeding scheduled installation did not take place earlier.
no auto-restart scheduled automatic update installation options - this policy specifies that, complete scheduled installation, automatic updates wait computer restarted instead of causing computer restart automatically.
delay restart scheduled installations - this policy specifies amount of time automatic updates should wait before proceeding scheduled restart.
reprompt restart scheduled installations - this policy setting specifies amount of time automatic updates should wait before prompting user again scheduled restart.

now, how set works on computer logged or not-logged on user? technet of wsus.

scenario following scheduled installation	with noautorebootwithloggedonusers enabled	with noautorebootwithloggedonusers disabled or not configured
no users logged on	automatic restart following installation	automatic restart following installation
single user administrative privileges	restart notification allows user start or postpone restart. notification not have countdown timer. therefore user must initiate system restart.	restart notification allows user start or postpone restart. notification has 5 minute countdown timer. when timer expires, automatic restart begins.
single user restart privileges no other administrative privileges	restart notification allows user initiate restart not postpone it. notification not have countdown timer. therefore user must initiate system restart.	restart notification allows user initiate restart not postpone it. notification has 5-minute countdown timer. when timer expires, automatic restart begins.
single non-administrator without restart privilege	restart notification not allow user initiate restart or postpone it. notification not have countdown timer. therefore user must wait authorized user initiate system restart.	restart notification not allow user initiate restart or postpone it. notification has 5-minute countdown timer. when timer expires, automatic restart begins.
administrator while other users logged on	restart notification not allow user initiate restart allow user postpone it. notification not have countdown timer. therefore user must initiate system restart.	restart notification not allow user initiate restart allow user postpone it. notification has 5 minute countdown timer. when timer expires, automatic restart begins.
non-administrator restart privilege while other users logged on	restart notification not allow user initiate restart or postpone it. notification not have countdown timer. therefore user must initiate system restart.	restart notification not allow user initiate restart or postpone it. notification has 5 minute countdown timer. when timer expires, automatic restart begins.
non-administrator without restart privilege while other users logged on	restart notification not allow user initiate restart or postpone it. notification not have countdown timer. therefore, user must wait authorized user initiate system restart.	restart notification not allow user initiate restart or postpone it. notification has 5 minute countdown timer. when timer expires, automatic restart begins.

so if not configure or disable the noautorebootwithloggedonusers option computer restart automatically if no interaction of user performed. now, if scheduled install missed because computer shutdown or something, that's the reschedule automatic updates scheduled installations option takes place. so, recommend set au options. 1 think don't need, set disabled, recommend set options.

this solution you:

example 1: installation must occur following system startup

this example shows consequences of reschedulewaittime set 1.

1.   update installations scheduled occur every day @ 3:00 a.m.

2.   reschedulewaittime registry value set 1.

3.   automatic updates finds update, downloads it, , ready install @ 3:00 a.m.

4.   logged-on user not see “ready install” prompt because user not have administrative privileges on computer.

5.   user shuts down computer.

6.   user restarts on computer after scheduled time has passed.

7.   when automatic updates starts, recognizes missed set scheduled installation time , reschedulewaittime set 1. therefore logs event new scheduled time (one minute after current time).

8.   if no 1 logs on before newly scheduled time (1 minute interval) installation begins. since no 1 logged on, there no delay , no notification. if update requires it, automatic updates restart computer.

9.   user logs on updated computer.

this guarantee won't have restarts in middle of day.
another item must take @ deadline of updates. if set deadlines on updates big different on how client take update. if deadline was passed the update installed immediately.

could test computer options set , updates no deadlines , see how behavior?
thanks

diego

---

mcitp/mcts/mcse/mcsa/mcp www.cabai.com.ar

Windows Server  >  WSUS