Windows 10 - Cannot press Install Now or Check for update - due to some obscure reg setting or GP bug


Recommended Posts

We have 5 workstations running Windows 10 ENT 1607 - all are installed via MDT and are managed to a small degree by a handful of GP settings. I also have WSUS running here at home - allowing me to manage the update process with ease.

 

All 5 stations are accessing WSUS using settings created and placed in the registry using the freeware WSUSClientManager tool out there on the internet. This tool has been flawless in creating the correct settings and allowing all machine to hit WSUS without fail.

 

However - for the June 2017 patch window - I discovered one of our machines was suddenly not able to update correctly. In the screen below - the station is seeing WSUS and is getting the correct three updates it needs. But notice that the Install Now button cannot be pressed.

 

CannotPressUpdateNow.thumb.png.d2f8fbf5d8238972df3a209cc746fd2c.png

 

I first thought it maybe a corrupt WU layout or possible some GP settings gone bad. So I stripped the GP back to default and forced a gpupdate /force command. Then I deleted all  WU settings placed by the WSUSClientManager tool and restarted. Still locked out. So I then ran the latest WUTroubleshooter to essentially reset WU back to scratch. Rebooted. Went into the WU Dialog and see something slightly different:

 

 

CannotCheckForUpdates.thumb.png.1da1ade6c21c5f49450ec77b57e3754e.png

 

But the bloody "Some settings are managed..." message is still displayed. Making it impossible to even click on Check For Updates


NOTE: I have tried every article I can find that suggests the this "Some settings are managed" message hanging around is some old bug due to some weird telemetry GP setting  - have turned all suggested settings on and off to no avail.

 

What the heck is going on here? I rarely get really stumped but this is driving me crazy. Now I cannot even get the machine to check for updates or anything.

 

Appreciate any ideas on where to go next.

 

Cheers,

 

VP

 

 

 

Tried that. Both before and after setting all GP settings back to default.

 

Nothing is enabled in the Windows Update area of GP since I do my updates via WSUS settings stored in the registry (Placed there by WSUSClientManager tool ). 

 

None of our machines use any group policy settings to access WSUS or apply updates.

 

VP

 

 

Have you read everything here?

https://support.microsoft.com/en-us/help/4022715/windows-10-update-kb4022715

 

Since it's for personal use only, I'm hanging on to W7...and exploring Linux after that.

My guess is some registry settings are still there.

 

Why dont you try manually removing WU registry keys, they can be found here HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate . Restart and check the WU Control Panel. BTW, make a registry export (backup) of WindowsUpdate key before you remove it from registry.

  On 19/06/2017 at 09:36, -ANiMaL- said:

My guess is some registry settings are still there.

 

Why dont you try manually removing WU registry keys, they can be found here HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate . Restart and check the WU Control Panel. BTW, make a registry export (backup) of WindowsUpdate key before you remove it from registry.

Expand  

Update on this - not exactly sure what the fix was but here's what I did.

 

  1. Removed ALL reg settings placed by WSUSClient Manager - ensured there was NO WindowsUpdate keys anywhere.
  2. Restarted the machine. Lockout messaging was still there
  3. Reconfirmed that there were no GP changes whatsoever. Even redid the script to set all GP back to default
  4. Restarted the machine. Lockout messaging was still there. Which was really annoying.
  5. Then in a desperation move - I decided to focus on the WU layout - and fired up a series of Windows Update troubleshooters out there. Oddly there are a couple of them - that do different things. These are usually in the form of cab files direct from MS - that you double click and walk thru a wizard.
  6. The first troubleshooter was the basic Windows 10 one that most everyone uses if you can finding the Troubleshoot Windows Update link inside the OS itself - it basically does a quick check of the WU layout and is done in about 20 seconds and I restarted.
  7. That one made no difference at all. WU checked out fine but the lockout messages were still there
  8. Then I was following another obscure thread in a different forum and found another Win 10 WU troubleshooter that did a lot more to check if WU was working.
  9. This one ran thru the basics but then did things like verified the WU update store, set up the most recent current updates to be downloaded and more.
  10. I let it finish and restarted
  11. When I came back in this time - the lockout messaging was gone and all the buttons "Update Now" etc were not greyed out.
  12. Success.

 

I saved that cab in my archive for use for future issues. Again - I have no idea where the "fix" for the lockout was lifted - but this machine is fine now.

 

Cheers,

 

VP

 

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • If a server wants 25% tip out of me, I'd better damn well be getting more than my food brought to me!  Tips are for service above the regular functions of a server, bringing my order to me.  You want more, do more.
    • the problem is a tip is VARIABLE you aren't guaranteed a specific income... just freaking pay your staff and set a fixed price for food
    • Operation Warp Speed Vaccine Summit - December 8, 2020 Donald Trump:  Thank you very much. Appreciate it very much. I’m honored to welcome doctors, scientists, industry executives, and state and local leaders to our historic Operation Warp Speed Vaccine Summit. It’s been some journey for all of us. It’s been an incredible success. We’re grateful to be joined by Vice President Mike Pence, who has done an absolutely incredible job on the Coronavirus Task Force. Mike, thank you. Stand up, Mike. (Applause.) Great job. We’re here to discuss a monumental national achievement. From the instant the coronavirus invaded our shores, we raced into action to develop a safe and effective vaccine at breakneck speed. It would normally take five years, six years, seven years, or even more. In order to achieve this goal, we harnessed the full power of government, the genius of American scientists, and the might of American industry to save millions and millions of lives all over the world. We’re just days away from authorization from the FDA, and we’re pushing them hard, at which point we will immediately begin mass distribution. Before Operation Warp Speed, the typical timeframe for development and approval, as you know, could be infinity. And we were very, very happy that we were able to get things done at a level that nobody has ever seen before. The gold standard vaccine has been done in less than nine months. And now this: Meghan McCain:  If you regret taking the shot, there's hope.  Buy this "Vaccine Detox"   🤣  
    • I haven't heard that sound in a while and now I kinda miss it.
  • Recent Achievements

    • Apprentice
      Wireless wookie went up a rank
      Apprentice
    • Week One Done
      bukro earned a badge
      Week One Done
    • One Year In
      Wulle earned a badge
      One Year In
    • One Month Later
      Wulle earned a badge
      One Month Later
    • One Month Later
      Simmo3D earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      559
    2. 2
      ATLien_0
      258
    3. 3
      +FloatingFatMan
      182
    4. 4
      Michael Scrip
      125
    5. 5
      Steven P.
      105
  • Tell a friend

    Love Neowin? Tell a friend!