I'm running SUS without AD (NoAutoRebootWithLoggedonUsers = 1), but clients don't have the opportunity to answer "no" for updates. The "no" is grayed out and the only possible choice is "yes." I want clients to have this choice. What shall I do?
As a best practice, just have your users log off before they leave work and schedule the installs at night. Configure SUS to automatically reboot the computers. When the users come back into work. Your environment will be patched and there will be no interruption for the users.
This was first published in December 2003