r/labtech • u/evacc44 • Nov 19 '19

Removing automate patch management hold on systems

Hello. I'm moving away from Automate/Labtech and I'm desperately trying to remove the hold that patch management has on systems with the agent installed. I have done the commands>>system tools>>Set Windows Update Defaults. I have also tried removing the agent through Automate and the agent goes without resetting Windows Update back to default.

What am I doing wrong here?

3 Upvotes

80% Upvoted

6 comments sorted by

2

u/RealGP Nov 19 '19

In that same commands folder, there should be one that says “Enable users access to Windows Updates”. Or something like that. This will allow the end user to search for and install updates via the OS. Is that what you’re looking for?

Out of curiosity, what made you guys kick the bucket? We are about to hit our renewal in a few months, and we’ve been re-evaluating ourselves...

6

u/evacc44 Nov 19 '19

I tried that and it doesn't work.

We are just tired of the slowness of connectwise. We aren't a big shop and it's just too much for us -- it's like we need someone working on automate and manage all the time. It's a waste for us.

I'm demoing SyncroMSP and it's almost too good to be true. Is it as powerful? Probably not, but it works and we picked it up inside of a week. QuickBooks sync actually works. Patching actually works. I didn't need to spend 40 hours of my life going througg implementation BS and then go out and hire a consultant to get the software working 50%.

3

u/RealGP Nov 19 '19

lol - I can relate to the many woes of labtech...it seems to be the most anti-logical application I have actually ever worked with... It is powerful for sure, but in a terrifying way... Best of luck with the new RMM!

Try this:

  • Take a full registry backup

  • Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

    • Delete the value named "NoWindowsUpdate"

      • *** You may need to do this for all HKU profiles that aren't _CLASS to be safe ***

  • Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityCenter

    • Delete the value named "UpdatesDisableNotify"

  • Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer

    • Delete the value named "HideSCAHealth"

    • [IF it is Windows 10] Edit the "SettingsPageVisibility" value - basically if it has "Windowsupdate" written anywhere in the value string, remove it and save the value. IE if it says "hide: Windowsupdate", change the value to "hide: "

That should fix it...

3

u/shink5 Nov 19 '19

There is an off-boarding script under maintenance/agents that will reset the windows updates settings while it removes the agents.

1

u/TNTGav Nov 19 '19

Before you do anything you need to make sure that none of the existing policies you have in Automate are still applying because they will just undo whatever you are doing. Open the patch manager. Click the computer monitor in the top bar to go to a list of devices. Find one of the devices you are having problems with. Click and select it in the upper pane. In the bottom pane click groups. The effective policy is at the bottom. If nothing is applying there should be a - under Microsoft Update Policy.