System Update FAQ#
How to run System Update by command line?
System Update can be controlled via command line by leveraging the group policy control for the Administrator Command Line. A typical scenario would have System Update executed by a task in the Windows Task Scheduler set to run on a recurring basis to ensure the device stays current. That scheduled task would execute:
The rest of the command line parameters would be specified as a Policy in the registry using either Group Policy or by manipulating the registry directly at:
When using a custom scheduled task, a new task should be created, and the default task created when System Update is installed should be disabled.
Additionally, the “SchedulerAbility” setting must be set to “NO” in the registry at:
This will prevent System Update from re-enabling the default tasks.Does System Update create temporary admin accounts?
Yes. When System Update is used by a standard user, a temporary admin account is created to enable the installation of updates. This account has a long, complex, random password that is not recorded anywhere.
After the updates have been installed, the account will be deleted automatically. In the case where a Reboot Type 1 (Forces Reboot) update is applied, the system will reboot before the account can be removed. System Update will remove the account the next time it runs.