WSUS Automation

[gadget]

Hi,

I need to run windows updates on systems fresh out of the box before shipping to end users. I am looking at deploying to XP, server 2003, Vista and don't really want to script manual installs of patches.

Windows Update is too slow so looking into using WSUS server.

Everything works in getting patches from the server ect but I would like to automate the download, install and reboot of the client systems automatically. I can script everything to set/clean registry ect but the best I can do so far is to run wuauclt to download and notify that updates are ready to install which required user intervention to run.

I have tried scanning then changing system times to try and get automatic updates to install these but it is not reliable.

Has anyone got any ideas on this?

Registary settings:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

"ElevateNonAdmins"=dword:00000001

"TargetGroup"="All Computers"

"TargetGroupEnabled"=dword:00000001

"WUServer"="http://server"

"WUStatusServer"="http://server"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

"AUOptions"=dword:00000004

"AutoInstallMinorUpdates"=dword:00000001

"DetectionFrequency"=dword:00000001

"DetectionFrequencyEnabled"=dword:00000001

"NoAutoUpdate"=dword:00000000

"RebootRelaunchTimeout"=dword:00000001

"RebootRelaunchTimeoutEnabled"=dword:00000001

"RebootWarningTimeout"=dword:0000001

"RebootWarningTimeoutEnabled"=dword:00000001

"RescheduleWaitTime"=dword:00000001

"RescheduleWaitTimeEnabled"=dword:00000001

"ScheduledInstallDay"=dword:00000000

"ScheduledInstallTime"=dword:00000005

"UseWUServer"=dword:00000001

"NoAutoRebootWithLoggedOnUsers"=dword:00000000

[gadget]

Well, in case you are interested, I add registry entries

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]

"WUServer"="http://server"

"WUStatusServer"="http://server"

"ElevateNonAdmins"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

"UseWUServer"=dword:00000001

"DetectionFrequencyEnabled"=dword:00000001

"DetectionFrequency"=dword:00000001

"AutoInstallMinorUpdates"=dword:00000001

"NoAutoUpdate"=dword:00000000

"AUOptions"=dword:00000004

"ScheduledInstallDay"=dword:00000000

"ScheduledInstallTime"=dword:00000003

"RescheduleWaitTimeEnabled"=dword:00000001

"RescheduleWaitTime"=dword:00000001

"NoAutoRebootWithLoggedOnUsers"=dword:00000000

"RebootWarningTimeoutEnabled"=dword:00000001

"RebootWarningTimeout"=dword:00000001

"IncludeRecommendedUpdates"=dword:00000001

Then reboot the system running shutdown scripts resetting these setting

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]

"ConfigVer"=dword:00000001

"AUOptions"=dword:00000001

"NextDetectionTime"="2008-01-20 13:49:08"

"ScheduledInstallDate"="2008-01-20 03:00:00"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect]

"LastSuccessTime"="2008-01-23 13:45:02"

"LastError"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download]

"LastSuccessTime"="2008-01-23 13:41:11"

"LastError"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install]

"LastSuccessTime"="2008-01-23 13:36:18"

"LastError"=dword:00000000

Not very tidy but seems to work in general. Need to install the latest windows installer first tho.