Windows Server Update Services (WSUS & SUS), часть III (2750) / Основное обсуждение и ссылки в этой теме

XXLIvan:
Уважаемые, прошу помощи:
Как настройки надо включить в GPO для клиентов с Windows 10, чтобы они начинали установку в 23:00 и перезагружали компьютер после этого, при необходимости?

Сейчас клиенты качают и ставят обновления, но автоматической перезагрузки не происходит.

Прилагаю экспорт настроек из реестра:

[more]
Код:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate] "SusClientIdValidation"=hex:06,02,28,01,1c,1c,20,00,20,00,20,00,20,00,20,00,20,\ 00,20,00,20,00,20,00,20,00,20,00,34,00,38,00,52,00,4b,00,41,00,36,00,37,00,\ 42,00,53,00,06,b4,2e,99,48,cd,8c,44,00,65,00,66,00,61,00,75,00,6c,00,74,00,\ 20,00,73,00,74,00,72,00,69,00,6e,00,67,00,44,00,65,00,66,00,61,00,75,00,6c,\ 00,74,00,20,00,73,00,74,00,72,00,69,00,6e,00,67,00 "LastDownloadsPurgeTime"="2020-03-04 21:21:57" "LastTaskOperationHandle"=dword:00000000 "UpdateDesiredVisibility"=dword:00000000 "SusClientId"="eec2e0db-5d0d-4f4d-a350-4b11ee90c8d7" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Power] "Firmware-Final"=dword:0000001e "OfferInstallAtShutdown-Final"=dword:00000028 "ContinueInstallAtShutdown-Final"=dword:0000000a "FirmwareForcedInstall-Final"=dword:00000023 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RequestedAppCategories] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RequestedAppCategories\3DA21691-E39D-4DA6-8A4B-B43877BCB1B7] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RequestedAppCategories\8B24B027-1DEE-BABB-9A95-3517DFB9C552] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RequestedAppCategories\9482F4B4-E343-43B6-B170-9A65BC822C77] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired] "44e12e62-8dfe-48b1-99cc-f7a97213e522"=dword:00000001 "3eec8b3d-c549-4a50-9a84-7f11c7ec2989"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator] "OobeCompleteTimeStamp"=hex:e3,07,0a,00,04,00,1f,00,09,00,0d,00,02,00,51,02 "USODiagnostics"=hex(b):b0,92,95,22,0f,ec,d5,01 "FlightPendingCommit"=dword:00000000 "PolicyHash"="onR3xQfCQu/H5Tjl1wzaLSMcU5B0Ay2nSdo+TXxUIrE=" "PolicyTimeStamp"=hex(b):10,19,ea,cd,4b,f1,d5,01 "UpdateRebootTime"=hex(b):d7,f8,41,3a,7a,ed,d5,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\ActiveUpdateSessions] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\ActiveUpdateSessions\51b519d5-b6f5-4333-8df6-e74d7c9aead4] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\Expedited] "ExpeditedMode"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\Scheduler] "UsoCrmScan"=hex(b):20,9e,5f,fa,cd,e7,d5,01 "SmartSchedulerValidationTask"=hex(b):80,24,1e,84,49,f2,d5,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\InstallAtShutdown] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\RebootRequired] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\PostBootInstall] "Timestamp"="2020-02-25T21:23:41Z" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting] "SamplingValue2"=dword:00000010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache.v2] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache.v2\Legacy] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\DontExpirePolledEvents] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\RebootWatch] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\855E8A7C-ECB4-4CA3-B045-1DFA50104289] "RegisteredWithAU"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\8B24B027-1DEE-BABB-9A95-3517DFB9C552] "RegisteredWithAU"=dword:00000000 "CountryCode"="RU" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\9482F4B4-E343-43B6-B170-9A65BC822C77] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\Pending] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS] "ClientHash2"=dword:00000233 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\{855E8A7C-ECB4-4CA3-B045-1DFA50104289}] "ResponseHash"=hex:0c,21,2f,4f,09,b3,22,a6,a2,eb,5a,33,91,e9,90,c7,15,31,0d,4b,\ 84,66,65,a0,a5,e8,2a,1a,a7,4d,50,57 "ResponseMarker"=hex(b):4c,31,5d,83,d1,8f,d5,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\{8B24B027-1DEE-BABB-9A95-3517DFB9C552}] "ResponseHash"=hex:83,4c,41,be,f4,10,84,9b,5d,8c,a9,0a,e3,ed,73,49,c5,1e,03,5a,\ 42,14,83,7a,77,e8,f1,ea,8e,79,44,1d "ResponseMarker"=hex(b):f8,cf,e1,83,d1,8f,d5,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\{9482F4B4-E343-43B6-B170-9A65BC822C77}] "ResponseHash"=hex:e8,f3,15,77,a4,d0,e7,f0,dc,2e,c9,05,7b,f9,57,41,d0,71,f9,82,\ eb,e7,7c,74,39,c8,80,d1,56,8d,65,81 "ResponseMarker"=hex(b):32,18,e2,82,d1,8f,d5,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\StickyUpdates] "3eec8b3d-c549-4a50-9a84-7f11c7ec2989"=hex(b):1e,19,82,8d,72,ed,d5,01 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "TargetGroupEnabled"=dword:00000001 "WUServer"="http://wsus.domain:8530" "WUStatusServer"="http://wsus.domain:8530" "AcceptTrustedPublisherCerts"=dword:00000001 "ElevateNonAdmins"=dword:00000001 "DisableDualScan"=dword:00000001 "DoNotConnectToWindowsUpdateInternetLocations"=dword:00000001 "ManagePreviewBuilds"=dword:00000000 "DeferQualityUpdates"=dword:00000000 "DeferFeatureUpdates"=dword:00000000 "SetDisableUXWUAccess"=dword:00000000 "AUPowerManagement"=dword:00000001 "AllowAutoWindowsUpdateDownloadOverMeteredNetwork"=dword:00000000 "SetAutoRestartRequiredNotificationDismissal"=dword:00000001 "AutoRestartRequiredNotificationDismissal"=dword:00000002 "SetComplianceDeadline"=dword:00000001 "ConfigureDeadlineForQualityUpdates"=dword:00000002 "ConfigureDeadlineForFeatureUpdates"=dword:00000002 "ConfigureDeadlineGracePeriod"=dword:00000001 "ConfigureDeadlineNoAutoReboot"=dword:00000001 "SetRestartWarningSchd"=dword:00000001 "ScheduleRestartWarning"=dword:00000004 "ScheduleImminentRestartWarning"=dword:0000000f "SetUpdateNotificationLevel"=dword:00000001 "UpdateNotificationLevel"=dword:00000000 "SetActiveHoursMaxRange"=dword:00000001 "ActiveHoursMaxRange"=dword:0000000d "SetAutoRestartNotificationConfig"=dword:00000001 "AutoRestartNotificationSchedule"=dword:0000000f "SetAutoRestartDeadline"=dword:00000001 "AutoRestartDeadlinePeriodInDays"=dword:00000002 "AutoRestartDeadlinePeriodInDaysForFeatureUpdates"=dword:00000002 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "UseWUServer"=dword:00000001 "AutoInstallMinorUpdates"=dword:00000001 "NoAutoRebootWithLoggedOnUsers"=dword:00000000 "RebootRelaunchTimeoutEnabled"=dword:00000001 "RebootRelaunchTimeout"=dword:0000000a "RebootWarningTimeoutEnabled"=dword:00000001 "RebootWarningTimeout"=dword:0000000a "EnableFeaturedSoftware"=dword:00000001 "NoAutoUpdate"=dword:00000000 "AUOptions"=dword:00000004 "ScheduledInstallDay"=dword:00000000 "ScheduledInstallTime"=dword:00000000 "NoAUAsDefaultShutdownOption"=dword:00000000 "NoAUShutdownOption"=dword:00000000 "AUPowerManagement"=dword:00000001 "DetectionFrequencyEnabled"=dword:00000001 "DetectionFrequency"=dword:0000000c "IncludeRecommendedUpdates"=dword:00000000 "AutomaticMaintenanceEnabled"=dword:00000001 "AlwaysAutoRebootAtScheduledTime"=dword:00000001 "AlwaysAutoRebootAtScheduledTimeMinutes"=dword:0000000f

[/more]