WSUS – Force Restart and Disable Choosing Updates in Windows Server 2012 R2

group-policywindows-updatewsus

My objective is that Windows Update runs everyday, install all available updates and (if necessary) automatically restarts the computer, giving the chance to the users to postpone it to maximum 4 hours…

I think I am almost done setting up a WSUS for our small infrastructure here, however there are still issues bothering me.

  • Which GPO setting should I use to force my clients to automatically install all available updates for their respective groups? ("Allow Automatic Updates immediate installation" isn't working…)

  • Which GPO can I use to disable the "Select the updates to install" in the Windows Update client application?

Thanks in advance!

Best Answer

You want to use Configure Automatic Updates and choose Download and Install, Every Day, and a time.

enter image description here

I don't believe there's a maximum number of "postpone reboots" or a way to turn off the selection screen, but if it applies before the user arrives you won't have that problem.