In the last several weeks we have had several Windows 2003 R2 Enterprise servers that have had their Automatic Updates settings change. We have our servers set to "Download updates for me, but let me choose when to install them.". We have came in several mornings to find a couple of servers had restarted over night. Further investigation finds the Automatic Updates setting changed to "Automatic (recommended)". The servers are not in an OU that has a GPO for WSUS or any automatic updates settings. The changing of the setting has been random. I checked several servers yesterday and all was well. I just checked one today and it is set for "Automatic". Anyone seen this? Any ideas?

Hi Can you make sure that no stuff modify the Automatic Update setting? Also, you can create an OU, configure the setting as "Download updates for me, but let me choose when to install them.", then the user cannot modify it.