Hi all,
I have been tearing my hair out over this for absolutely weeks now. I'm sure I've probably just misconfigured a policy or something, but I can't for the life of me work out where, so any help at all would be gratefully received!
We're running WSUS 3.2.7600.226 on an S2012 R2 box.
Our S2012 R2 servers appear to be failing to restart when this is required as part of an update installation. If I look at the Windows Updates console on an affected machine, it says "we'll finish installing some updates the next time your PC is restarted." If I look at the update history, there will be updates which are listed with "pending restart".
I have the following GPO settings applied:
Allow Automatic Updates immediate installation: Disabled
Allow non-administrators to receive update notifications: Disabled
Always automatically restart at the scheduled time: Enabled; 15 minute timer
Check for updates at the following interval: 1 hours
Configure automatic updating: 4 (every Saturday, 1am, Install during automatic maintenance disabled)
Delay restart for scheduled installations: Disabled
No auto-restart with logged on users for scheduled automatic updates installations: Disabled
Re-prompt for restart with scheduled installations: Disabled
Reschedule automatic updates scheduled installations: enabled; wait 5 minutes
If I look in the event log of an affected machine, I see the attempts to restart by RestartManager, followed by tons of event 10010:
Application 'C:\Windows\explorer.exe' (pid 6384) cannot be restarted - Application SID does not match Conductor SID..
That's one example. One server I looked at had the same for a number of applications.
It looks a bit to me like WSUS doesn't have permissions to complete the reboot. I'm wondering if one of my GPO settings is to blame, or if there's something I've failed to configure which would give these permissions? Or am I barking up the wrong tree altogether?
Hugely grateful for any help anyone can offer me!