Automatically Install updates on Windows Server 2016 (RTM)

Question

_{Thursday, October 20, 2016 8:09 AM}

Hey

Why does Windows Server 2016 ignore the GPO? (Configure Automatic Updates)

All replies (8)

_{Saturday, October 29, 2016 5:17 PM ✅Answered | 1 vote}

A few things:

1. The default setting for Windows Update in Windows Server 2016 is that it is enabled by default and set to "*Download updates for me, but let me choose when to install them" . *What you are seeing the in the Group Policy Settings screen shots at the top correctly reflects the default setting of Win2016.
2. The default will just download the updates.  Updates will not be installed automatically
3. The description under "Update settings" (circled in screen shot above) does not accurately reflect the current Windows Update setting.  It is wrong... it's a bug...  you can ignore...  we are working to get that fixed.

See this blog for more details about how updates now work with Windows Server 2016

https://blogs.technet.microsoft.com/mu/2016/10/25/patching-with-windows-server-2016/

Thanks!
Elden

_{Thursday, October 20, 2016 10:40 AM}

I have entirely the same issue on a server my end, I have been shown a screenshot of a server 2016 setup with this setting applying correctly.

When correctly applied and Advanced options is pressed there is orange text reading 'some settings are managed by your organisation' but I am not getting that either.

I am watching this forum intently.

_{Thursday, October 20, 2016 3:23 PM}

Set it to "Disabled"

And then you must check for updates manually

Guillermo Delprato
Buenos Aires, Argentina
El Blog de los paso a paso

MVP - MCSE - MCSA2012
MCITP: Enterprise Administrator / Server Administrator
MCTS: Active Directory/Network Configuration/Applications Configuration/Server Virtualization/Windows 7 Configuration/Windows 7 & Office 2010 Deployment/Vista Configuration

Este mensaje se proporciona "como está" sin garantías de ninguna clase. Usted asume todos los riesgos.

_{Friday, October 28, 2016 7:05 AM | 1 vote}

Hi Mike_Denmark,

Yeah, on Windows server 2016, windows update agent will always automatically install updates as soon as it download the update, ignore the AU settings we set. As far as I know, this behavior is also the same on Win10.

Best Regards,

Anne

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, August 30, 2017 1:39 PM}

Dear Microsoft!

YOU ARE DOING IT *WRONG*!!!

As above, I have set the GPO to 'Auto download, notify for install'; and I've tried using the sconfig to set 'DownloadOnly' ... and both actually sets the right registry value ... BUT IT *STILL INSTALLS* instead of just downloading, and EVEN WANT TO REBOOT automaticallly!

Oooh Microsoft - you are doing it REALLY WRONG!

Stop being a Nanny, and let us who actually have the responsibility for the servers and their uptime decide when to do things! Stop being stupid and LISTEN! -- I guess you have heard of systems running 24/7 where downtime must be planned very carefully ... PLEASE let us get the control back!

/Martin

_{Friday, March 23, 2018 2:35 PM}

I currently see the same behavior. Sconfig set to do nothing, but the 2016 servers still download and install updates AND reboot.

_{Monday, April 30, 2018 4:52 PM}

Hello

Is not true 

See my server use GPO to fix "AUOptions" to 3 but my server install automatically update, is unacceptable.

So what solution do you propose?
Deploy updates manually?
Do I understand that WSUS is not compatible with Server 2016?

_{Friday, September 21, 2018 11:55 AM}

Thanks, folks for the input on the discussion about "Controlling Windows Update" for server 2016.

I also do not understand this change for WUA, one thing is for home users and Another for corperate servers. I have tested several ways to make the WUA to "Download updates for me, but let me choose when to install them" for server 2016. I alwas ends with "Available updates Will be downloaded and installed automatically"

We have the WUA agent set to disable because we use the SCCM Software Update, Download, installations and Maintanance Widows and not the WUA

Windows Components/Windows Update hide
Policy - Setting - Comment
Configure Automatic Updates - Disabled

I added this regvalue, but did not help

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AUOptions"=dword:00000002

2 - Notify for download and notify for install: If updates are found that need to be installed on the computer the user will be notified that there are updates ready to be downloaded and installed. This option will allow users to download and install the updates.

But I ends with this :(

Update settings:
Available updates Will be downloaded and installed automatically, except over metered connections (where charges may apply),

/SaiTech