Managing Windows Updates on Client and Server Systems

Overview

This lab demonstrates how to resolve Windows Update issues both on the client side and through centralized Group Policy control on the server. The client approach focuses on local troubleshooting, while the server approach automates update policies using Active Directory and GPOs.

Skills Demonstrated
Troubleshooting paused or failed Windows updates on client systems
Verifying update history and installation dates via Control Panel
Creating and configuring a Windows Update GPO
Automating update schedules using Group Policy settings
Linking GPOs to specific Organizational Units (OUs)
Confirming policy application through client-side enforcement indicators

Tools Used
Windows Server (Active Directory Domain Services)
Windows 10
Group Policy Management Console (gpmc.msc)
Group Policy Management Editor
Windows Update Settings (Client)
Control Panel – View Installed Updates

---

Windows Update Issues - Client

1. Check for Paused Updates

• On the Windows 10 Client, navigate to:
  Settings > Update & Security > Windows Update
• In this case, updates were paused, so I selected "Resume updates"

2. Updates Begin Installing

• After resuming, the updates started installing automatically

3. Verify Update Installation

• Opened Control Panel > Programs > View Installed Updates
• Verified the installation by checking the "Installed on" date and the name of the update

---

Windows Update Issues - Server

1. Environment Setup

• Installed a Windows Server VM
• Created a local Administrator account
• Installed Active Directory Domain Services (AD DS)
• Promoted the server to a Domain Controller with the domain name: lab.local

• Created a domain user:
  • Name: John Doe
  • Logon Name: j.doe

2. Create OU and Add Client Machine

• Created a new Organizational Unit: LabComputers
• Added the Windows 10 Client VM to this OU

4. Configure Group Policy for Updates

• Opened Group Policy Management Console
• Created a new GPO: Windows Update Policy

• Edited the GPO at:
  Computer Configuration > Administrative Templates > Windows Components > Windows Update
• Enabled Configure Automatic Updates
  • Set to: Auto download and schedule the install
  • Schedule: Every day at 3 AM

5. Link GPO to LabComputers OU

• In Group Policy Management, linked the Windows Update Policy GPO to the LabComputers OU

6. Confirm GPO Application

• On the Windows 10 Client, opened Windows Update settings
• Noted the message: "Some settings are managed by your organization"
  This confirms the GPO is active and working