Share via

Configure Automatic Updates in a Non–Active Directory Environment

In a non-Active Directory environment, you can configure Automatic Updates by using any of the following methods:

  • Using Group Policy Object Editor and editing the Local Group Policy object
  • Editing the registry directly by using the registry editor (Regedit.exe)
  • Centrally deploying these registry entries by using System Policy in Windows NT 4.0 style

WSUS Environment Options

The registry entries for the WSUS environment options are located in the following subkey:


The keys and their value ranges are listed in the following table.

Windows Update Agent Environment Options Registry Keys

Entry Name Values Data Type
ElevateNonAdmins Range = 1|0

1 = Users in the Users security group are allowed to approve or disapprove updates.

0 = Only users in the Administrators user group can approve or disapprove updates.
TargetGroup Name of the computer group to which the computer belongs, used to implement client-side targeting—for example, "TestServers." This policy is paired with TargetGroupEnabled. Reg_String
TargetGroupEnabled Range = 1|0

1 = Use client-side targeting.

0 = Do not use client-side targeting. This policy is paired with TargetGroup.
WUServer    HTTP(S) URL of the WSUS server used by Automatic Updates and (by default) API callers. This policy is paired with WUStatusServer; both must be set to the same value in order for them to be valid. Reg_String
WUStatusServer The HTTP(S) URL of the server to which reporting information will be sent for client computers that use the WSUS server configured by the WUServer key. This policy is paired with WUServer; both must be set to the same value in order for them to be valid. Reg_String
Automatic Update Configuration Options -------------------------------------- The registry entries for the Automatic Update configuration options are located in the following subkey: **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU** The keys and their value ranges are listed in the following table. ### Automatic Updates Configuration Registry Keys
Entry Name Value Range and Meanings Data Type
AUOptions Range = 2|3|4|5

2 = Notify before download.

3 = Automatically download and notify of installation.

4 = Automatic download and scheduled installation. (Only valid if values exist for ScheduledInstallDay and ScheduledInstallTime.)

5 = Automatic Updates is required, but end users can configure it.
AutoInstallMinorUpdates Range = 0|1

0 = Treat minor updates like other updates.

1 = Silently install minor updates.
DetectionFrequency Range=n; where n=time in hours (1-22).

Time between detection cycles.
DetectionFrequencyEnabled Range = 0|1

1 = Enable DetectionFrequency.

0 = Disable custom DetectionFrequency (use default value of 22 hours).
NoAutoRebootWithLoggedOnUsers Range = 0|1;

1 = Logged-on user gets to choose whether or not to restart his or her computer.

0 = Automatic Updates notifies user that the computer will restart in 5 minutes.
NoAutoUpdate Range = 0|1

0 = Enable Automatic Updates.

1 = Disable Automatic Updates.
RebootRelaunchTimeout Range=n; where n=time in minutes (1-1440).

Time between prompting again for a scheduled restart.
RebootRelaunchTimeoutEnabled Range = 0|1

1 = Enable RebootRelaunchTimeout.

0 = Disable custom RebootRelaunchTimeout(use default value of 10 minutes).
RebootWarningTimeout Range=n; where n=time in minutes (1-30).

Length, in minutes, of the restart warning countdown after installing updates with a deadline or scheduled updates.
RebootWarningTimeoutEnabled Range = 0|1

1 = Enable RebootWarningTimeout.

0 = Disable custom RebootWarningTimeout (use default value of 5 minutes).
RescheduleWaitTime Range=n; where n=time in minutes (1-60).

Time, in minutes, that Automatic Updates should wait at startup before applying updates from a missed scheduled installation time.

Note that this policy applies only to scheduled installations, not deadlines. Updates whose deadlines have expired should always be installed as soon as possible.
RescheduleWaitTimeEnabled Range = 0|1

1 = Enable RescheduleWaitTime

0 = Disable RescheduleWaitTime(attempt the missed installation during the next scheduled installation time).
ScheduledInstallDay Range = 0|1|2|3|4|5|6|7

0 = Every day.

1 through 7 = The days of the week from Sunday (1) to Saturday (7).

(Only valid if AUOptions equals 4.)
ScheduledInstallTime Range = n; where n = the time of day in 24-hour format (0-23). Reg_DWORD
UseWUServer The WUServer value is not respected unless this key is set. Reg_DWORD