Automatic Update Settings w/K1000
I'm migrating from a WSUS Server to a K1000 appliance (in a non-AD environment). Should I disable Automatic Updates (ie. NoAutoUpdate=1)? What about laptops?
All computers currently have the following WSUS settings -
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DoNotAllowXPSP2"=dword:00000001
"WUServer"="http://OldWsusServer"
"WUStatusServer"="http://OldWsusServer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000f
"UseWUServer"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000016
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:000005a0
All computers currently have the following WSUS settings -
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DoNotAllowXPSP2"=dword:00000001
"WUServer"="http://OldWsusServer"
"WUStatusServer"="http://OldWsusServer"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000f
"UseWUServer"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000016
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:000005a0
0 Comments
[ + ] Show comments
Answers (4)
Please log in to answer
Posted by:
dchristian
13 years ago
dbot,
If you are migrating over you should definitely disable WSUS.
You can also create a patch schedule specifically for laptops.
Some people take a more aggressive approach and patch laptops during the day and suppress the reboot.
Depending on the environment this may be something you want to do.
Your Jumpstart trainer will go over all the different options during your training.
If you are migrating over you should definitely disable WSUS.
You can also create a patch schedule specifically for laptops.
Some people take a more aggressive approach and patch laptops during the day and suppress the reboot.
Depending on the environment this may be something you want to do.
Your Jumpstart trainer will go over all the different options during your training.
Posted by:
dbot
13 years ago
I shall politely say thank you for your timely response (my 1st post). I was hoping for a more detailed answer, but I shall return later w/a follow-up on the actuals. Thanks!~ D.
p.s. Jumpstart trainer? Is that free w/purchase? I must have missed the giveaway. I had to hire Pro Services & there wasn't time to chit-chat about disabling 'old' services, so that is why I'm revisiting the topic. I sort of disabled WSUS the first time around from the server end, but need to go back & clean-up the workstations. I am non-AD, very painful, but hey, I think I can use the Kbox to push registry changes, right? BTW, did I mention, I think I love this Kbox - it has made my life 1000 times easier. I just need to get to know it a little better :>)
p.s. Jumpstart trainer? Is that free w/purchase? I must have missed the giveaway. I had to hire Pro Services & there wasn't time to chit-chat about disabling 'old' services, so that is why I'm revisiting the topic. I sort of disabled WSUS the first time around from the server end, but need to go back & clean-up the workstations. I am non-AD, very painful, but hey, I think I can use the Kbox to push registry changes, right? BTW, did I mention, I think I love this Kbox - it has made my life 1000 times easier. I just need to get to know it a little better :>)
Posted by:
cblake
13 years ago
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
so that the conversation will remain readable.