Quantcast
Channel: VMware Communities: Message List - VMware View
Viewing all 19267 articles
Browse latest View live

Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

Hi All,

 

Trying to get my Windows 10 parent image prepared for a linked-clone composer pool and every time I disable the Windows Update service it eventually gets set back to Manual and it starts up.

 

I've tried setting a Group Policy to set it to disabled in the linked-clones but it still somehow changes.

 

I saw this entry in the System event viewer log

 

"The start type of the Windows Update service was changed from disabled to demand start"

 

Within about a minute of that I also see these entries about other services being changed

 

"The start type of the Connected User Experience and Telemetry service was changed from disabled to auto start"

 

"The start type of the Windows Modules Installer service was changed from demand start to auto start"

 

Anyone know what is changing these services? We do not have anti-virus installed and we are not using SCCM so I know it's not either of those.

 

Thanks!


Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

I am currently going trough the same process, check all the tasks in the task scheduler. There are some causing havoc. Oh and btw LTSB is sadly NOT supported for oiffice usage by Microsoft only for special cases like atm's and medical equipment.

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

Hi Magneet,

 

Thanks for the reply. I just went through the VMware Optimization Tool and found all the scheduled tasks is recommends disabling and did so... I'll check Monday to see if the Windows Update service is still disabled and report back.

 

When you say LTSB doesn't support Office is it that it won't even install or it will install but Microsoft won't help you if you run into issues?

Thanks!

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

the latter, it will work perfectly and seems to be the perfect fit vor VDI, Microsoft doesn't support it sadly.

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

Not a fix to your solution but a possible workaround. You can change the permissions on the registry key so that SYSTEM cannot change it.

 

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv

Script to look and add free vms in pool

0
0

I am looking for a script that will automatically add VM to pool when number of vms are less than the users entitled to pool.

 

Currently users are entitled thru a security group. Admins don't know if enough VMS are available in pool unless we manually go and check the pool size and free vms available.

 

We provision VM's in advance and not on demand as it usually takes 15 to 20 mins to provision a vm.

 

Visan.

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

Thanks Magneet and TechGuy129

 

I'm a little hesitant to change the permissions on the registry entry only because I want to easily be able to turn the service back on in the master image when I want to install updates on my terms (but if I have to I'll take that route!).

 

I checked today and unfortunately the service started up again on the master image and on the clone. Here is the list of scheduled tasks I disabled in the master image without luck (the list comes from the VMware Optimization Tool)

 

schtasks /Change /TN "\Microsoft\Windows\Defrag\ScheduledDefrag" /Disable

schtasks /Change /TN "\Microsoft\Windows\AppID\SmartScreenSpecific" /Disable

schtasks /Change /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable

schtasks /Change /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable

schtasks /Change /TN "\Microsoft\Windows\Application Experience\StartupAppTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\Autochk\Proxy" /Disable

schtasks /Change /TN "\Microsoft\Windows\Bluetooth\UninstallDeviceTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\Chkdsk\ProactiveScan" /Disable

schtasks /Change /TN "\Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable

schtasks /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable

schtasks /Change /TN "\Microsoft\Windows\Diagnosis\Scheduled" /Disable

schtasks /Change /TN "\Microsoft\Windows\DiskCleanup\SilentCleanup" /Disable

schtasks /Change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable

schtasks /Change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver" /Disable

schtasks /Change /TN "\Microsoft\Windows\Feedback\Siuf\DmClient" /Disable

schtasks /Change /TN "\Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable

schtasks /Change /TN "\Microsoft\Windows\Location\Notifications" /Disable

schtasks /Change /TN "\Microsoft\Windows\Maintenance\WinSAT" /Disable

schtasks /Change /TN "\Microsoft\Windows\Maps\MapsToastTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\Maps\MapsUpdateTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /Disable

schtasks /Change /TN "\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /Disable

schtasks /Change /TN "\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable

schtasks /Change /TN "\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable

schtasks /Change /TN "\Microsoft\Windows\RAS\MobilityManager" /Disable

schtasks /Change /TN "\Microsoft\Windows\Registry\RegIdleBackup" /Disable

schtasks /Change /TN "\Microsoft\Windows\Servicing\StartComponentCleanup" /Disable

schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable

schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyRefreshTask" /Disable

schtasks /Change /TN "\Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Disable

schtasks /Change /TN "\Microsoft\Windows\SystemRestore\SR" /Disable

schtasks /Change /TN "\Microsoft\Windows\TPM\Tpm-Maintenance" /Disable

schtasks /Change /TN "\Microsoft\Windows\UPnP\UPnPHostConfig" /Disable

schtasks /Change /TN "\Microsoft\Windows\WDI\ResolutionHost" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Filtering Platform\BfeonServiceStartTypeChange" /Disable

schtasks /Change /TN "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable

schtasks /Change /TN "\Microsoft\Windows\WOF\WIM-Hash-Management" /Disable

schtasks /Change /TN "\Microsoft\Windows\WOF\WIM-Hash-Validation" /Disable

 

There are 4 scheduled tasks having to do with Windows Updates that are not listed above, I am going to add them to my lists of scheduled tasks to disable and see how I make out.

 

They are....

 

\Microsoft\Windows\WindowsUpdate\Automatic App Update

\Microsoft\Windows\WindowsUpdate\Scheduled Start

\Microsoft\Windows\WindowsUpdate\sih

\Microsoft\Windows\WindowsUpdate\sihboot

 

I would think a ton of other people are dealing with this, no?!?!?!

 

Thanks!

Re: Youtube Performance Poll


Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

What you're seeing is the workings of KB4023057 patch. In Microsoft's infinite wisdom, they decided to push out an update that has a process running on the background which will attempt to find and, well, "fix" any issues that will cause Windows Update to not work. In all fairness, that's probably in their best interest and would probably allow regular user's desktops to receive updates normally, except it wasn't supposed to be pushed out to the LTSB build, but it did anyway. And obviously, this isn't going to work out if you have non-persistent desktops and disabled Windows Update service for a reason.

 

You can find the KB4023057 from the Control Panel -> Add/Remove programs (don't use the app & features list on the settings app) and uninstall it. Then, ensure the scheduled tasks listed in one of the replies are all disabled. Namely, you want to disable the ones listed under Microsoft\Windows\UpdateOrchestrator and Microsoft\Windows\Windows Update.

 

You can then use the wushowhide diagnostic tool to hide that update (https://support.microsoft.com/en-us/help/3073930/how-to-temporarily-prevent-a-driver-update-from-reinstalling-in-window) so you can prevent it from being installed. Just bear in mind that Windows Update service and Windows Modular Installer service has to be enabled and running before running the wushowhide tool. Also, Microsoft often pushes out a new version of the KB4023057 patch occasionally, so you probably want to run the wushowhide tool every time you need to update the image with the new Windows patches. I may also add that there has been reports that even with Windows Update service disabled, the patch can get pushed out and get installed, so you may want to check your list of installed patches from Add/Remove Programs too.

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

Hi solgaeDK,

 

I actually do not see KB4023057 installed. We are running "Windows 10 Enterprise 2016 LTSB" The ISO we installed from is named "SW_DVD5_WIN10_ENT_LTSB_2016_64BIT_English_MLF_X21-07421.ISO".

 

I only see these Windows Updates listed under control panel -> Programs & Features -> View Installed Updates

 

Untitled.jpg

Re: Script to look and add free vms in pool

0
0

I don't have a script to offer but instead a suggestion if you get one. I'd add some type of verification to the process before increasing the pool size. Just in case someone mistakenly adds a large amount of users to a AD group that could overwhelm your cluster and impact the performance of your users.

Re: Can not finish creating a linked clone RDS Farm

0
0

you may be on to something there sjesse, I do not have any options in customization specification to select.

Thanks, I will try and figure out where I can create these customizations and see if it helps.

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

The patch, if installed, is listed as part of the regular app list under Programs and Features, instead of being listed the "view installed updates" list as you would expect. Go figure why.

 

I believe it's usually named as: Update for Windows 10 (KB4023057).

Re: Script to look and add free vms in pool

0
0

Good advice BenFB

 

My script takes this into account and has a $threshold variable to set the limit of new machines that can be created.


Re: Script to look and add free vms in pool

0
0

So I couldn't find a way to do this via the Horizon API so we'll do it old school. I wrote a script that does what you need.

 

You'll need to run this from a server that has RSAT installed with the PowerShell AD modules. It creates an implicit connection to the View Server and imports the commands necessary to run.

 

https://get-cj.com/2018/04/02/auto-add-machines-to-vmware-horizon-pool-based-on-entitled-users/

 

The variables you need to change are at the top. $viewserver, $pooldisplayname, $machinebuffer, and $threshold. Here's the top section for reference.

 

#Change these settings to match your environment ###########################################################

$viewserver="NAME_OF_SERVER" 

$poolDisplayName='DISPLAY_NAME_OF_POOL'

 

#Buffer number of machines to increase pool by. Change this based on your estimated needs.

#The script will increase the max number of machines by (Total Amount of entitled users - The difference of Total Machines in pool) + $machineBuffer

#So if the total amount of machines is 3 and the total number of entitled users is 5. We need 2 machines right? So the script will add 2 machines + $machineBuffer.

 

$machineBuffer=1

 

#If totla machines to add is greater or equal to 50 don't do it. This is a precautionary measure in case someone adds too many users to the entitled AD group.

$threshold=50

############################################################################################################

Re: Rejoin composer server into domain with other hostname

0
0

Hi ArnoM, thank you for your answer! I will follow the migration scenario. And I would like to ask for one question yet. Because we didn't note the sqlpassword for user (fault), can I change the password in sql studio and than to change on composer server in ODBC connection without any corruption or interruption of real traffic?

 

Thank you!

Re: Windows Update service will not stay Disabled in Windows 10 Enterprise 2016 LTSB

0
0

so embarrassing, it was right in front of me where you said it is!

 

I'll work to remove it, block it, then reply with my results.

 

Thanks!

Re: Script to look and add free vms in pool

0
0

I will try your script. It seems to do what I am looking for. Is it possible to include below conditions in the script:

 

1. I have around 18 full and linked clone pools. I like to query all the pools at same time once in a day and expand pool size if their are no VMS available.

 

2. In addition to entitling the pool to the AD groups their are some pools that have individual users entitled to it.

 

How can we modify script to include these 2 conditions?

 

Visan.

Re: Rejoin composer server into domain with other hostname

0
0

You  basically installing a new composer service and pointing to the database, so resetting the dsn user password shouldn't be  problem. This is from what was previously was shared.

 

Install the VMware Horizon View Composer service on the new machine.   

During the installation, specify the DSN of the database that was used by the original VMware Horizon View Composer service. Also specify the domain administrator user name and password that were provided for the ODBC data source for that database.

If you migrated the database, the DSN and data source information must point to the new location of the database. Whether or not you migrated the database, the new VMware Horizon View Composer service must have access to the original database information about the linked clones.

Viewing all 19267 articles
Browse latest View live




Latest Images