windowswideopen.com

Client Registry Settings

SUS Client Registry Key settings and values:
================================

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
“NoWindowsUpdate”=dword:00000001(enabled) or dword:00000000(disabled)
Setting this to 1 disables and removes links to Windows Update.Description:Removes the Windows Update link from the More Programs list in Start menu, from the Tools menu in IE, and blocks user access to http://windowsupdate.microsoft.com

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
“DisableWindowsUpdateAccess”=dword:00000001(enabled) or dword:00000000(disabled)
This setting allows you to remove access to Windows update. If enabled, all Windows Update features will be removed and blocked. This includes blocking access to the Windows Update Web site at http://windowsupdate.microsoft.com and from the Windows Update hyperlink on the Start menu and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy also prevents Device Manager from automatically installing driver updates from the Windows Update Web site.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
“WUServer”=”http://SUSServer”
Sets the MSUS server by HTTP name. Value type is string.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
“WUStatusServer”=”http://SUSServer”
Sets the MSUS intranet statistics server by HTTP name. Value type is string.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“AUOptions”=dword: Value is either 2, 3, or 4.
2 = Notify for download and install,
3 = Automatically download and notify for install,
4 = Automatically download and schedule the install.
Note: All options will notify the local administrator.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“NoAutoRebootWithLoggedOnUsers”=dword:00000001(enabled) or dword:00000000(disabled)
0 = enabled ,
1 = disabled. Value type is dword.
If the status is set to Enabled, Automatic Updates will not restart a computer automatically during a scheduled installation if a user is logged in to the computer. Instead, Automatic Updates will notify the user to restart the computer to complete the installation.

Be aware that Automatic Updates will not be able to detect future updates until the restart occurs.

If the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation.

Note: This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the
“Configure Automatic Updates” policy is disabled, this policy has no effect.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“NoAutoUpdate”=dword:00000001(enabled) or dword:00000000(disabled)
0 = Automatic Updates client is enabled (default),
1 = Automatic Updates client is disabled. Value type is dword.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“RescheduleWaitTime”= dword range: 00000001(1min) to dword:0000003c(60min)
dword:00000001 = 1 minute
dword:00000002 = 2 minutes
dword:00000003 = 3 minutes
dword:00000004 = 4 minutes
dword:00000005 = 5 minutes
dword:00000006 = 6 minutes
dword:00000007 = 7 minutes
dword:00000008 = 8 minutes
dword:00000009 = 9 minutes
dword:0000000a = 10 minutes
dword:0000000b = 11 minutes
dword:0000000c = 12 minutes
dword:0000000d = 13 minutes
dword:0000000e = 14 minutes
dword:0000000f = 15 minutes
dword:00000010 = 16 minutes
dword:00000011 = 17 minutes
dword:00000012 = 18 minutes
dword:00000013 = 19 minutes
dword:00000014 = 20 minutes
dword:00000015 = 21 minutes
dword:00000016 = 22 minutes
dword:00000017 = 23 minutes
dword:00000016 = 22 minutes
dword:00000017 = 23 minutes
dword:00000018 = 24 minutes
dword:00000019 = 25 minutes
dword:0000001a = 26 minutes
dword:0000001b = 27 minutes
dword:0000001c = 28 minutes
dword:0000001d = 29 minutes
dword:0000001e = 30 minutes
dword:0000001f = 31 minutes
dword:00000020 = 32 minutes
dword:00000021 = 33 minutes
dword:00000022 = 34 minutes
dword:00000023 = 35 minutes
dword:00000024 = 36 minutes
dword:00000025 = 37 minutes
dword:00000026 = 38 minutes
dword:00000027 = 39 minutes
dword:00000028 = 40 minutes
dword:00000029 = 41 minutes
dword:0000002a = 42 minutes
dword:0000002b = 43 minutes
dword:0000002c = 44 minutes
dword:0000002d = 45 minutes
dword:0000002e = 46 minutes
dword:0000002f = 47 minutes
dword:00000030 = 48 minutes
dword:00000031 = 49 minutes
dword:00000032 = 50 minutes
dword:00000033 = 51 minutes
dword:00000034 = 52 minutes
dword:00000035 = 53 minutes
dword:00000036 = 54 minutes
dword:00000037 = 55 minutes
dword:00000038 = 56 minutes
dword:00000039 = 57 minutes
dword:0000003a = 58 minutes
dword:0000003b = 59 minutes
dword:0000003c = 60 minutes

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“ScheduledInstallDay”= Dword Range is 0, 1, 2, 3, 4, 5, 6, 7.
dword:00000000 = Everyday
dword:00000001 = Sunday
dword:00000002 = Monday
dword:00000003 = Tuesday
dword:00000004 = Wednesday
dword:00000005 = Thursday
dword:00000006 = Friday
dword:00000007 = Saturday

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“ScheduledInstallTime”= dword: (need to convert number from hex to dec to get time)
dword:00000000 = 12:00am (midnight)
dword:00000001 = 1:00am
dword:00000002 = 2:00am
dword:00000003 = 3:00am
dword:00000004 = 4:00am
dword:00000005 = 5:00am
dword:00000006 = 6:00am
dword:00000007 = 7:00am
dword:00000008 = 8:00am
dword:00000009 = 9:00am
dword:0000000a = 10:00am
dword:0000000b = 11:00am
dword:0000000c = 12:00pm (noon)
dword:0000000d = 1:00pm
dword:0000000e = 2:00pm
dword:0000000f = 3:00pm
dword:00000010 = 4:00pm
dword:00000011 = 5:00pm
dword:00000012 = 6:00pm
dword:00000013 = 7:00pm
dword:00000014 = 8:00pm
dword:00000015 = 9:00pm
dword:00000016 = 10:00pm
dword:00000017 = 11:00pm
Value = the time of day in 24-hour format (0-23). Value type is dword.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
“UseWUServer”=dword: dword:00000001(use a WUServer) or dword:00000000(do not use WUserver)
Set this value to 1 to enable the Automatic Updates client to use the Microsoft Software Update Services server as specified in WUServer. Value type is dword.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ nWindowsUpdate\Auto Update]
“DetectionStartTime”=”2002.08.15 04:31:25“
Value is a Date and Time Stamp, Value Type is REG_SZ
A detection cycle should occur within 10 minutes of this timestamp.
To force an Automatic Updates client to perform a detection, follow the instructions outlined in KB Article below:

326693 How to Force Automatic Updates 2.2 to Perform a Detection Cycle
http://kb/article.asp?id=Q326693 Q326693.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
“AUState” n Value is 0, 1, 2, 3, 4, 5, 6, 7, or 8. Value type is dword.
0 = Initial 24 hour timeout (the AU wizard does not run until 24 hours after it first detects an Internet connection)
1 = “Automatic Updates is waiting for the user to run the AU setup wizard.” It’s relevant for people who are running AU but not SUS. When AU detects that you have an Internet connection and it starts bugging you, then AUState is 1.
2 = “detect pending” “Detect pending” refers to the fact that AU is idle for 17 to 22 hours, and then it goes out and checks for new updates. The process of asking about new updates is apparently also known as “detecting.” “Detect pending,” then, means “AU has downloaded and installed all of the updates that it found last time and waiting for some time before checking with its update server again.”
3 = “Download Pending”: AU has detected available updates and has asked the user if it can update them but the user either hasn’t responded or hasn’t allowed it yet.
4 = “Download in progress”: AU is downloading patch(es) right now.
5 = “Install Pending”: AU has downloaded patches to the WUTemp directory and is waiting to install them. It is either waiting for approval from the user via the Automatic Updates user interface, or it is waiting for the scheduled hour of day to begin installing.
6 = “Install Complete”: Patches have been downloaded and installed.”
7 = “Disabled.” (Adoptions will also be set to a value of 0×1)
8 = “Reboot Pending”: Patch(es) requiring a reboot have been installed. However, the user told Auto Updates not to reboot; AU will do nothing until the next reboot.”

WSUS WSUS CLient Regsitry settingsWSUS WSUS CLient Regsitry settings

No Comments »
Filed under: WSUS