This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello Techies,
One of our client's servers running Windows Server 2006 and the Windows Update Settings is set to DownloadOnly in 'sconfig'. And non of the configuration set in the GPO (all are in 'Not Configured' state).
I tried searching for the root cause - why the server got rebooted even it was not set to automatic and couldn't find a proper solution.
There are so many discussions about this issue and no one know why this is happening (one of the discussion pages - https://community.spiceworks.com/topic/2106334-windows-10-windows-updates)
The process C:\Windows\System32\svchost.exe (SERVER) has initiated the restart of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned)
Reason Code: 0x80020010
Shutdown Type: restart
Comment:
Also, are we able to check when the 'sconfig' settings for Windows Update Settings have been modified and why?
Please advise.
Kind regards,
Sri
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Some updates microsoft deems critical will bypass this, do the install and reboot. If you can't live with this then you could stand up a site WSUS where you'll have complete control over updating.
--please don't forget to upvote and Accept as answer if the reply is helpful--
Hi @Anonymous ,
Thank you for the response.
Do we have any proper documentation from MS about this "Some updates microsoft deems critical will bypass this, do the install and reboot"
There may be, but I don't have any specific links.
--please don't forget to upvote and Accept as answer if the reply is helpful--
So this means - "stand up a site WSUS where you'll have complete control over updating" no matter what settings in sconfig, to prevent from automatic reboot we must control WSUS like this?
It's simply one option available to you.
--please don't forget to upvote and Accept as answer if the reply is helpful--
Hello Ssri,
You are right that many community users have experienced this behavior. Not being by default for any updates but it happens from time to time, which makes it more difficult to isolate and troubleshoot.
In my case I can recommend to set the next policy, as it did resolved my issue (at last didn't experienced any reboot due to WU in the last 5 months):
Computer Configuration > Administrative Templates > Windows Components > Windows Update. Double-click “No auto-restart with logged-on users for scheduled automatic updates” in the main pane, set to "Enable".
--If the reply is helpful, please Upvote and Accept as answer--
Thank you for your response.
As you mentioned, I'm aware of this configuration, but there are some scenarios where even after configuring "No auto-restart with logged-on users for scheduled automatic updates", it only prevents auto-reboot while users logged in. If no user logged in to the server then it reboots. I'm not looking for this kinda behaviour.
As @Anonymous said if this is the case "Some updates microsoft deems critical will bypass this, do the install and reboot", I'm looking for documentation from Microsoft but couldn't find anything so far.
By the way, this server is using Bitdefender for Endpoint Protection, and I found this in logs at the same time when the server got rebooted.
It seems it only notifys that system needs a reboot. But I don't think Bitdefender can reboot the server without user instructions. Am I right?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 24%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
@Sri
Please try to disable the group policy and confirm whether the Automatic Updates has been turned off.
I have already tested in my lab and I found the following tips has been added on the client after disable the Group Policy:
Please try to disable the Configure Automatic Updates policy and then confirm whether the Automatic Updates has been turned off or not.
Hope the above will be helpful.
Regards,
Rita
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 32%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHN%3C/text%3E%3C/svg%3E)
I had the problem with a 2019 server after an inplace upgrade, the automatic update was scheduled via a local policy.
Please check if you find the configured values from your update policy in the registry:
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
Your chosen autoupdate options should be stored as a dword value named AUOptions
If the AU key or the whole WindowsUpdate key is missing press apply again in your policy (in my case it wrote the values then) or import the registry values from a working device.
Hope this helps