Hi everyone,
I have a very limited patch window to do updates in, and I've run across some problems, and wanted to ask if anyone has a solution.
The behavior is simple, the server gets the patch from wsus - and then for some reason it decides that it cannot run the patch during the current patch window, and must run it during the next.
These patches need to be manually tripped - basically i have to RDP into the server and manually start the patch process. Running Wuauclt /updatenow will sometimes also work, but doing it through the interface works 100% of the time.
I'd like to avoid these cases, they take time away from reporting and have caused a few cases where I was getting close to my deadline because a lot of these popped up. It is frustrating, because month to month this will happen on different servers, it never seems to have any sort of pattern. It has happened on server 2008 R2 and server 2003 boxes as well, virtual, or no.
Here's an example from the last patch cycle. Keep in mind, a patching window is currently open when this message is presented, every Tuesday between 9 PM and 11 PM. (unfortunately, we aren't allowed to patch the servers inside this patch group on any
other day but the last Tuesday of every month, and they must be successful.)
Log Name: System
Source: Microsoft-Windows-WindowsUpdateClient
Date: 3/26/2013 9:00:10 PM
Event ID: 18
Task Category: Automatic Updates
Level: Information
Keywords: Success,Download
User: SYSTEM
Computer: PRDTO2SRCW03.Canwest.TV
Description:
Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on Tuesday, April 02, 2013 at 9:00 PM:
- Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 R2 x64 Edition (KB2809289)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2807986)