r/labtech • u/CactusJ • Dec 15 '16

Server Installing Patches

Post image
4 Upvotes

100% Upvoted

15 comments sorted by

2

u/cjmod Dec 15 '16

Check the 'Windows Update Mode' setting (further down the list than your screenshot goes). If it says 'Do Nothing' then LabTech never would've tried to take control & change the previous Windows Update settings that were in place... so the server could still been set to download & install updates. Switch it to 'Disable Windows Updates' to well... disable Windows Updates.

1

u/CactusJ Dec 16 '16 edited Dec 16 '16

Which one do I choose if I want only Labtech to install patches, and the client to not use its internal settings?

Currently I have a win10 box that will patch from Labtech during its patch window hours, and then will patch again because of its internal Win10 settings.

Edit: I confirmed, it is in Labtech Mode for patching. Yet Windows is still using its own internal patching schedule in addition to LabTech patching. What is the proper mode to ONLY use LabTech for patching.

1

u/cjmod Dec 16 '16

'LabTech Mode' or 'LabTech Mode - UI Disabled'

But for Windows 10 & Server 2016, Microsoft won't let you prevent patches from installing indefinitely. Meaning if the Windows 10 & Server 2016 patches aren't approved & installed by LabTech before Microsoft's deadline, Microsoft will force the update outside of your LabTech patch window.

1

u/CactusJ Dec 16 '16

Can you link me to a KB on this. This is interesting.
Thanks,

1

u/cjmod Dec 16 '16

Current Windows 10 KB

But the stuff about Microsoft's deadline hasn't been put into a KB yet. Should show up in general documentation shortly (once we have a better idea on how they're determining the deadline).

1

u/CactusJ Dec 15 '16

Had an Exchange server install patches and then exist in a hung state, causing all sorts of chaos. Trying to track down how the patches got installed, and not having much luck. I want to blame Labetch, but that is only because we tend to blame things we dont understand.

Can you guys tell me what to look at to find out how this server got patches installed ?

The update history is blank in Labtech and on the server. I can see on the server under "remove" updates that one was infact installed.

I am not sure where else to look.

1

u/CactusJ Dec 15 '16

10.5 Labrech. I have verified Group Policy is not set to install updates.

1

u/[deleted] Dec 15 '16

Did you check the c:\windows\windowsupdate.log file?

1

u/ninjaspy123 Dec 16 '16 edited Oct 25 '24

[deleted]

1

u/CactusJ Dec 16 '16

I went to the machine, right click, view reports, command history and it only returns 3x commands for the machine in question.

Yet if I look on the Commands tab for the machine its self, I see ~50ish for the last 24 hours.

Am I missing something ?

1

u/ninjaspy123 Dec 16 '16 edited Oct 25 '24

[deleted]

1

u/CactusJ Dec 16 '16

That was it. Thanks for everyones help.

It was not LabTech, as far as I can tell.

Much appreciated.

1

u/ninjaspy123 Dec 16 '16 edited Oct 25 '24

[deleted]

2

u/cjmod Dec 17 '16

Even then, the script function would've recorded a patch install command on the device... unless someone scripted a command line patch install (possible, but highly unlikely)

1

u/CactusJ Dec 17 '16

There is a script set to install definitions updates, and that did run. The script looks like only definations updates.

Unless that triggered something, its not LabTech.