2

I have setup several Windows Server 2102 R2 instances in Google Cloud and need top be able to control the windows update settings, but they are currently listed as "Managed by your system administrator"

I have tried to disable this by setting the disable-agent-updates value to true in project metadata but this has not worked.

Does anyone know of another way to do this maybe what i might be doing wrong?

Many Thanks

David

Improve this question

2 Answers 2

Reset to default
1

When updates are "Managed by your system administrator" this implies that the servers are being configured for updates by group policy or a local WSUS server or Google cloud services. Things to check, if the servers are domain joined look at the group policy settings with GPRESULT /R

See This answer relating to how to check for WSUS servers https://superuser.com/questions/189704/how-can-i-check-if-a-computer-is-configured-to-use-wsus

And on Google cloud instances try the following:

On the Windows Server instance, open a PowerShell terminal as an administrator. Run the googet remove command to remove the package:

PS C:> googet remove google-compute-engine-auto-updater Optionally, you can reinstall the package to enable automatic component updates:

On the Windows Server instance, open a PowerShell terminal as an administrator. Run the googet install command to install the package:

PS C:> googet install google-compute-engine-auto-updater Alternatively, you can disable the updates by setting the disable-agent-updates value to true in project or instance custom metadata. The metadata value disables updates without removing the package or the task.

Improve this answer
3
  • I was concerned about using the googet command as i only want to disable windows updates not all google updates. I have already tried the last option "you can disable the updates by setting the disable-agent-updates value to true in project or instance custom metadata. The metadata value disables updates without removing the package or the task."
    – David Guillaume
    Jan 2, 2018 at 16:56
  • anything you set in metadata usually on executes on boot (from my experience with other clouds) so this may not take effect until you reboot. if google cloud uses cloud-init that you should be able to consult those logs within the configuration drive
    – Sum1sAdmin
    Jan 2, 2018 at 16:58
  • 1
    A point of clarification: WSUS doesn't manage nor control the Windows Updates settings on client machines.
    – joeqwerty
    Jan 3, 2018 at 2:24
0

The easiest way I found (detailed here) is to update the metadata for the VM: And add the disable-agent-updatesand true.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .