Running a TrueSight Server Automation (TSSA) patch deploy job against Windows targets may complete successfully however it takes longer than when compared with other patch installation methods.

It can take hours longer than expected if a target has not been patched before. A deploy job may also have reboots in the middle, even when reboots were set to be consolidated for the end of the run.

Merely turning off Windows Update via Group Policy (GPO) will not resolve this. The Windows Update control panel needs to be set so it never checks for updates:

1. Open the Control Panel for Windows Update (WU) and click on Change Settings;

2. Edit the settings so it never checks for updates. The "Important updates" drop-down should be set to "Never check for updates (not recommended)". See screen shot below
   
   --

3. Open 'services.msc' and stop the Windows Update service to interrupt any ongoing checks

4. Set the WU service to start manually (if this is not already the value). This will allow the BSA deploy job to start it as necessary
   
   

5. Open the Group Policy Editor and go to "Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update". Confirm there is no custom location setting for "Specify intranet Microsoft updater service location"
   
   

6. Start the WU service again to confirm nothing happens.

7. If the problem persists, check to see if Anti-Virus scanners may be playing a part in the slow performance.