We want to use LANDesk for all of our patching needs. However, when we push a patch out to a Windows 7 machine that requires a reboot, the-end user always gets the Windows Action Center message pop up that says "Windows can't update important files and services while the system is using them. Make sure to save your files before restarting." Windows then gives the end-user the options to "Restart now" or "Postpone" and "Remind me in: (default is 10 minutes)."
At the same time, LANDesk Security and Compliance Manager also comes up (when all patching is complete) and tells the user a similar message (a message we CAN control in LANDesk).
We want to be able to control what options the end-user has. For example, we want to be able to give the user the option of deferring a maximum of 3 times for no more than 4 hours at a time. After that, we want to just force the reboot. The problem arrises, particularly, when the end-user sees the Windows message and just clicks "Restart now" before LANDesk (vulscan.exe) actually finishes doing it's thing in the background. This results in the task failing to install all the patches. On the flip side of that, we don't want the user to just be able to keep "Postponing" forever. We only want to give them a limited number of deferrels.
Basically, we don't want Windows to interact with the user at all with regard to Windows updates. We want to control it all via LANDesk and LANDesk only.
Here's what we've tried so far:
Under the Windows Action Center, turning off basically everything:
After that didn't work, we tried to modify the following Group Policies as follows:
So far, we've still been unable to stop the Windows message from popping up. Can anyone help us? I find it hard to believe that no one has done this before.
Also, I forgot to mention we are running LDMS 9.5. Thanks!
Kenny