Hello all
I am running a full Windows XP / 2003 environment of about 1700 nodes and our patch management is done via LANDesk only so we have a domain-wide GPOin Active Directory that disables anything related to Windows Update (prevent going to the website, turn the Windows Update service off, etc ...)
Recently we have added brand new Windows 2008 servers in our datacenter and I am managing them with our LANDesk 8.8 SP2A. They indeed get the same GPO
I have come accross this issue: When deploying patches to these servers the patches do not go through at all. It seems that Windows 2008 (and looks like Vista is the same) actually requires the Windows Update service to run in order to apply these patches.
I get the following error in the Event Log:
The Windows update could not be installed because of an error: 2147943458 "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it."
(Command line: ""C:\Windows\system32\wusa.exe" "C:\Program Files (x86)\LANDesk\LDClient\sdmcache\windows6.0-kb972260-x64.-k6DQA.msu" /quiet /norestart")
Has anyone come accross this problem ? How do you resolve this without removing the GPO that blocks Windows Update (I'd rather not set these servers in a special container - too much administration overhead and too easy to forget it's here)
Thanks in advance
Olivier