i'm going to resurrect an old posting of mine from over a year ago since it's reared it's ugly head again - unless users haven't been reporting it for over a year. i thought it might help to start anew. but here's the original posting.
2 of our Windows Server 2003 SP2 PS4.0 serving up AppA and our users are seeing the Restart Now / Restart Later prompt when using that app. we distribute our updates from our SUS? server and we apply them ourselves "manually". to clarify points from my original post: we don't let the system apply them automatically. and we have a Test environment where we apply them first. we set the server to reboot weekly at an obscure a.m. hour.
we also have our GP setting for "Allow non-administrators to receive update notifications" set to Disabled. so i would have thought this would have prevented them from receiving the prompt, but that doesn't seem to be the case or at least it's started back up again since my original post.
Sounds like the updates are getting installed automatically or another admin is applying the updates. Check the eventviewer to see when the patches are applied. Are you configuring your WSUS settings through a GPO? I would double check to confirm that your GPO settings are not autmatically installing updates.
i'm either not understanding the responses i'm getting on this issue or not explaining it correctly. your response Corey is similar to a couple responses i got last year when i posted this same issue.
i'm not concerned that the updates are getting applied because I AM applying them myself manually - they are not getting automatically applied. i want to apply them. what i don't want is the remote users seeing the Restart Now/Restart Later pop up while they are using apps via Web Interface. they can't actually chose either option (they are grayed out) but they can close the box. they are using Published Applications, not Published Desktop or anything like that.
our group policy is set so they should not see the prompts. and none of these users are in the Admins group. so i don't understand why they are seeing the prompt to Restart Now/Restart Later. again, though, they are not seeing the prompt to apply updates - WE apply the updates then chose to reboot later that night when no users are on. but during the rest of the day, after we've applied the updates and before our reboot time, some users are reporting they see the prompt. our only fix is we wait to apply them at the end our our day so as few people as possible would get the prompt.
I assumed when you installed the updates, you would reboot the server at that point. Its not reccommended to install updates while users are logged unto the system. From past experiences, I would install and reboot in the same process. I have seen admins install updates, reboot the server 3 weeks later, and then find problems. At that point if you have problems, you don't realize the patches caused the problems.
This is a typical non-answer answer. The matter of installing the updates is irrelevant. The non-admin users should not be seeing a useless 'reboot now' box when they cannot actually institute such a reboot (in fact, the 'reboot now' and 'reboot later' options are greyed out). All the non-administrator can do is cancel the dialog. The solution i have used, to solve this problem, is to change the permissions on the wuauclt.exe (which is the program responsible for the annoying useless dialog) so that it can only be executed by administrators. As an administrator, I am well aware of the impact of installing an update on the system is, and I schedule my actions accordingly. Due to extenuating circumstances it is not always possible to reboot exactly when the update is installed, or when the users receive the warning. This change allows me to do my job, not get fired, and not force the users to see a completely useless reboot warning that neither they nor I can do anything about at this moment in time. The server will be rebooted according to our required schedule.
sounds like more of an issue with GP, would you mind posting your settings for your WSUS GP?
Thanks
Corey is correct. You should not be installing updates during the day while users are on the server. It is very dangerous to do so. Server updates should only be done when you are ready to reboot the server.
Correct me if I am wrong, trying to clarify the issue...
When users launch a seamless app they see the WU notification icon from the XA server populate into their systray locally? Is that the issue?
After I install updates, I do a net stop "automatic updates" to stop the box from popping up...
There are better ways I suppose but its how I do it.
I am also experiencing this issue. I quite empathise with you over the non-answers and people passing judgment on when you should or should not reboot or install your updates. They clearly live in a perfect world and not the real one that the rest of us have to live in. I too would rather have a proper answer or not one at all!
Does anyone actually have a solution to this?
If it is a seamless app I have a workaround:
CTX101644
DISABLE SYSTRAY AGENT
--Emil
Thanks Emil, I can now confirm that the workaround works Ok.
Mark
EmilBeck,
Where do you modify this setting? Thanks I am a newbie in Citrix.
Thanks!
I know this post is a bit old, but as it came up while I was searching for where the GPO settings for this item and no one had posted it here I thought I would add it...
Via either GPO or the local policy editor:
Computer Config > Policies> Admin Template > Windows Comp > Windows Update > Allow Non-Administrators to receive update notifications (set to disabled).
That should resolve your issue.