Yesterday (Friday the 13th), we encountered several servers that were unexpectedly restarted after Windows Update installation even the auto-restart has been disabled on GPO/Policy settings.
The common of these affected servers were in Windows Server 2012 R2 version. And as checked on the event viewer, we found an event ID 22 before the restart, where it indicates the KBs there & will be restarted in 15mins.
Upon research, event ID 22 is something to do w/ publishing settings using trace configuration utilities. Now, I'm not sure if the unexpected restart is due to Windows update or a 3rd party app that uses trace configuration settings (like remote tool app or something else) that was mentioned.
Would like to ask if someone here also encountered the same issue ?
And would like to ask Microsoft Team as well as we read about this kind of restart behavior of Windows 2012 R2 last 2019, that after 3days of updates installation, it will indicate that will be restarted in 15mins. Is this really the cause of the issue we faced & it will bypass the Policy settings w/c has been disabled for auto-restart ?
Your response & thoughts about this would be greatly appreciated. Thank you.