group policy keeps disabling windows updates, but I cant find it 1

[computerjock33]

I have a wsus server on win2k3 server that has worked for a long time, but I noticed that it hasnt run in a while on some machines and its because the windows update / automatic update service is disabled after rebooting pc's. All of my wsus settings look correct and if I renable the service it will pull the updates from the wsus server fine, its just that after a reboot the service is disabled again.. any suggestions are appreciated
thanks

 

[fugtruck]

You can use the command "gpresult" to find out what all group policies are applied to that server. Then look at each policy in turn.

Also, a good malware scan might be in order. There may be some scumware disabling automatic updates in order to reduce security on that box.

 

[computerjock33]

I have, there are only 3 gpo's and none are set to disable updates in the windows update areas. It is happening on a large majority of our pc's and servers. I took a test laptop and renabled the service on it......ran a gpupdate /force and within a few minutes it was disabled again. Going to run a malware scan, but feel pretty sure its a policy of some sort. thanks

 

[58sniper]

Use the Group Policy Modelling wizard in the GPMC. That should show you.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.exchangeblogs.com/

 

[computerjock33]

thanks sniper!!! took some digging around, but for some reason the windows update system service gp setting was set to disable. thanks a a ton