Automatic Updates in SP2

[mizkitty]

I don't get any warnings or setup screens during install...everything runs fine with no user input.

But when I check Security Center after install is finished...the "automatic updates" needs to be enabled manually.

I've got this line already in my winnt.sif:

[Data]

AutomaticUpdates=yes

Is there another entry or reg. setting I can add so the end user doesn't have to enable "automatic updates"?

[Aaron]

hmm.. open your regtweaks file and check if there is an entry that disables the Automatic Updates service. This could be the culprit.

[mizkitty]

Thanks for the quick reply...but it was happening even before I added a regtweaks file.

Is there something I can add to "regtweaks" to enable it?

[MHz]

Yours is

[Data]

AutomaticUpdates=yes

Ref Manager states

[Data]

AutomaticUpdates=1

This little difference might count?

[mizkitty]

Tried both...the updated ref.chm for SP2 Deployment Tools also lists both.

The "Help Protect Your PC" page is skipped during install, but the "automatic updates" isn't enabled when I check it later.

[mizkitty]

Found a solution...added this to my regtweaks file:

;Manage Automatic Windows Updates

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]

"NoAutoUpdate"=dword:00000000

"AUOptions"=dword:00000004

"ScheduledInstallDay"=dword:00000000

"ScheduledInstallTime"=dword:00000003

Enables Autoupdates, with installs @ 3AM. It also greys out the options on the security panel so the customer can't turn it off. B)

[blinkdt]

@mizkitty

I found the following registry change did the trick for me, very similar to yours above:

;Manage Automatic Windows Updates
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000004
"ResetAU"=dword:00000001
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000016
"ConfigVer"=dword:00000001

Nothing is greyed out, changes can be made to the settings. Windows adds the appropriate "NextDetectionTime" and "ScheduledInstallDate" binary entries automatically.

The other problem I had, how to NOT monitor the antivirus program (I use Symantec Antivirus Client without the parent server), was solved by the following:

;Override Antivirus
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000000

Just importing "AntiVirusOverride"=dword:00000001 did not do the trick, the other entries helped complete the package. Now my Security Center works the way I want it to work.

[argon007]

You must quote yes for AutomaticUpdates to effect it.

like this...

AutomaticUpdates="Yes"