I've a Windows Server 2008 Group Policy set for a few Windows XP/Vista clients. I've enabled Automatic Updates and set them to download and install at 10am every day from a WSUS server. The policy works perfectly for all clients, howeverwhen I open the Security Center on the Vista clients, "Automatically updating" is listed as off.In the Security Center under Automatic Updating there's an option "Change Settings". If I click it, then select "Install updates automatically (recommended)", I get an error "Security Center can't change your automatic updating settings".In the Control Panel -> Windows Update -> Change Settings, it's set to "Install updates automatically" every day at 10am. It's also set to download the recommended updates.Any ideas?

Run an rsop.msc on the clients and see if the clients are getting that policy.

Thanks, that was very helpful. I managed to track it down to the Windows Update service. Under Computer Configuration - Policies - Windows Settings - Security Settings - System Services, I had the Windows Update service set to start automatically. The security settings for the service were set to SYSTEM - Full Control, Administrators - Full Control, INTERACTIVE - Read. I changed it back to undefined and it's all green now in the Security Center.