bagr84 Posted May 28, 2013 Report post Posted May 28, 2013 Hi guys, in our organisation, we do have an autodeployment rule set for windows updates running on collection containing our servers. The update will not install automatically after deadline. Recently we discovered some of the updates were installed but apparently no one initiated it. We would like to make sure that it was not any of users who installed the updates and see if they were installed by sccm (and find out why?). Can anyone tell me where to find any info who or what initiated the installation? I checked all the Update*.logs - no avail _SCNotify.log - nothing WMI query (Win32_QuickFixEngineering - InstalledBy) - it says NT Authority\SYSTEM (this is same for sccm and user initiated users). Can anyone help? Quote Share this post Link to post Share on other sites More sharing options...