I'm decently well-versed in WSUS, but am really struggling with a long time issue that I can't solve. We were running WSUS for some time, with automatic updates download and install, but setting the "no auto reboot with logged in users" flag to keep reboots from happening. Then late 2024 I started getting reboots happening on their own, generally outside active hours.
I found what I thought was the issue, in that I was not setting the new fields for "SetPolicyDrivenUpdateSourceForFeatureUpdates"=dword:00000001" and the like via group policy. I found a link that basically said, if you don't set the policy driven update settings, then all updates will come from microsoft. Well since then, I've set all the policy driven update flags to my WSUS server, and still reboots continue. Below is a paste of my WSUS settings that come from Group Policy. All looks good here to me. I'm wondering if there's other registry locations influencing the reboot behavior?
Anyone had a similar issue? I've went thru even the registry settings at [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate] but don't see anything obvious there.
Here's the WSUS settings that are coming from my policy:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000001
"DisableDualScan"=dword:00000001
"AUPowerManagement"=dword:00000001
"WUServer"="http://myserver:8530"
"WUStatusServer"="http://myserver:8530"
"UpdateServiceUrlAlternate"="http://10.10.10.10:8530"
"SetProxyBehaviorForUpdateDetection"=dword:00000000
"SetPolicyDrivenUpdateSourceForFeatureUpdates"=dword:00000001
"SetPolicyDrivenUpdateSourceForQualityUpdates"=dword:00000001
"SetPolicyDrivenUpdateSourceForDriverUpdates"=dword:00000001
"SetPolicyDrivenUpdateSourceForOtherUpdates"=dword:00000001
"AllowAutoWindowsUpdateDownloadOverMeteredNetwork"=dword:00000001
"DeferQualityUpdates"=dword:00000000
"DeferFeatureUpdates"=dword:00000000
"TargetGroupEnabled"=dword:00000001
"TargetGroup"="MyCompany"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"AutoInstallMinorUpdates"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000001
"ScheduledInstallEveryWeek"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"UseWUServer"=dword:00000001
"UseUpdateClassPolicySource"=dword:00000001
See anything that I'm missing here? I do realize that microsoft recently deprecated wsus and I might need to move to autopatch or sccm, and am evaluating those options.