Configuring Automatic Updates

Using a graphical user interface

  1. To configure Automatic Updates locally on a system, do the following:
  2. Open the System applet in the Control Panel.
  3. Select the Automatic Updates tab.
  4. Check the box beside Keep my computer up to date to enable Automatic Updates.
  5. Once you have done that, the radio buttons under Settings will become active. Select how you want to be notified about new updates and whether you want to automatically install them.
  6. Click OK when you are done.

To configure Automatic Updates using Group Policy, do the following:

  1. Open the Group Policy Management Console.
  2. In the left pane, navigate to the group policy object (GPO) you want to modify.
  3. Right-click the target GPO and select Edit.
  4. In the left pane of the Group Policy Object Editor, expand Computer Configuration Administrative Templates Windows Update.
  5. In the right pane, double-click the setting you want to configure.

Using a command-line interface

The following commands enable Automatic Updates to automatically download new updates and notify when installation is ready to proceed:

> reg add HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU /t REG_DWORD /v
NoAutoUpdate /d 0
> reg add HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU /t REG_DWORD /v
AUOptions /d 3
> net stop wuauserv
> net start wuauserv

You must restart the Automatic Updates service before the changes take effect.

The following commands, placed in a batch file, will enable Automatic Updates to automatically download new updates from a Software Update Services (SUS) v1.1 Server and notify when installation is ready to proceed:

set SUSSERVER=<SUSServerName>
net stop wuauserv
if exist temp.reg del temp.reg

echo Windows Registry Editor Version 5.00>>temp.reg
echo.>>temp.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]>>temp.reg
echo "WUServer"="http://%SUSSERVER%">>temp.reg
echo "WUStatusServer"="http://%SUSSERVER%">>temp.reg
echo.>>temp.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]>>
temp.reg
echo "NoAutoUpdate"=dword:00000000>>temp.reg
echo "AUOptions"=dword:00000003>>temp.reg
echo "UseWUServer"=dword:00000001>>temp.reg
echo "ScheduledInstallDay"=dword:00000001>>temp.reg
echo "ScheduledInstallTime"=dword:00000003>>temp.reg
echo.>>temp.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update]>>temp.reg
echo "AUState"=dword:00000002>>temp.reg
echo "LastWaitTimeOut"="2000.01.01 00:00:01">>temp.reg
echo "SusServerVersion"=dword:00000001>>temp.reg
echo "ConfigVer"=dword:00000001>>temp.reg

regedit /s temp.reg
del temp.reg
net start wuauserv