A
Arcom76
We have noticed on multiple Windows 2016 servers that they are not always rebooting after the installation of a cumulative update, while the have been configured as such with a GPO. The Resultant Set of Policy shows that the correct automatic updates settings have been applied. Furthermore, this happens only on some of the 2016 servers, that all have the same update policy applied.
On the servers that do successfully restart, the following event is logged:
For example, this month we had it with a couple of servers for the August cumulative update:
The event log on all servers list the entry that the update started:
EntryType: Information
Message: Installation Started: Windows has started installing the following update: 2019-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4512517)
Source: Microsoft-Windows-WindowsUpdateClient
UserName: NT AUTHORITY\SYSTEM
However, only the servers that automatically reboot have this entry:
Source: USER32
EntryType: Information
Message:
The process C:\Windows\system32\svchost.exe (GH-PXS-SRV-04) has initiated the restart of computer <hostname> on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned)...
---
On the servers that don't reboot, there is a pending reboot visible in the Windows Update UI, and also because this registry key exists: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired
This issues happens both on Windows Server 2016 core as full GUI versions. This is the LTS version of Win2016. (Build 1607)
We've expirienced this issue for several months now with different cumulative updates..
Any ideas??
-\
/-
Continue reading...
On the servers that do successfully restart, the following event is logged:
For example, this month we had it with a couple of servers for the August cumulative update:
The event log on all servers list the entry that the update started:
EntryType: Information
Message: Installation Started: Windows has started installing the following update: 2019-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4512517)
Source: Microsoft-Windows-WindowsUpdateClient
UserName: NT AUTHORITY\SYSTEM
However, only the servers that automatically reboot have this entry:
Source: USER32
EntryType: Information
Message:
The process C:\Windows\system32\svchost.exe (GH-PXS-SRV-04) has initiated the restart of computer <hostname> on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned)...
---
On the servers that don't reboot, there is a pending reboot visible in the Windows Update UI, and also because this registry key exists: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired
This issues happens both on Windows Server 2016 core as full GUI versions. This is the LTS version of Win2016. (Build 1607)
We've expirienced this issue for several months now with different cumulative updates..
Any ideas??
-\
/-Continue reading...