I'm running SUS without AD (NoAutoRebootWithLoggedonUsers = 1), but clients don't have the opportunity to answer...
"no" for updates. The "no" is grayed out and the only possible choice is "yes." I want clients to have this choice. What shall I do? This is a function of SUS. The reason for having the NO button disabled is because end-users shouldn't be able to postpone it. Otherwise, some users will continue to postpone the updates and your machines will not receive their patches.
As a best practice, just have your users log off before they leave work and schedule the installs at night. Configure SUS to automatically reboot the computers. When the users come back into work. Your environment will be patched and there will be no interruption for the users.
Dig Deeper on Microsoft Active Directory Design and Administration
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.