none
SCCM 2012 agents and the Windows Update icon

    Question

  • I am new to SCCM and have some hopefully simple questions about updates.

    It seems that once the SCCM agent is installed, the traditional 'Windows Update' becomes vestigal; that is, it serves no real purpose anymore, since the Configuration Manager component of the control panel is where checking for updates becomes explicitly triggered.

    If this is true, then what is the best way to hide the Windows Update icon? It is confusing to some users to have this icon and function when it no longer serves any purpose. I know there are ways to do this via GPO settings, but I was wondering if there were any best practices on how to apply such a GPO; through OUs? Group Membership? WMI filters checking for presense of the client? Ideally, the icon would not be hidden until the agent was properly running and installed on the target machine.

    What are some of the ways to manage the hiding/showing of the Windows Update icon?

    Thursday, September 06, 2012 2:03 PM

All replies

  • There is a setting titled "Enable Windows Update Notifications" in the following location:



    * User Configuration

      * Administrative Templates

        * Windows Components

          * Windows Update



    You can select:  'Enabled', 'Disabled' and 'Not Configured'.



    Here is the explanation of the policy:

    The policy specifies which notifications may still be displayed to a
    user when the “Remove access to use all Windows Update features”
    policy is enabled.  When both policies are enabled you can configure one
    of the following notification options:



    0 = Do not show any notifications



    This setting will remove all access to Windows Update features and no notifications will be shown.



    1 = Show restart required notifications



    This setting will show notifications about restarts that are required to complete an installation.



    Note: If this policy is disabled or not configured then no notifications
    will be given to the user when the “Remove access to use all Windows
    Update features” policy is enabled.  This policy has no effect if the
    “Remove access to use all Windows Update features” policy is
    disabled or not configured.

    http://www.gpanswers.com/community/18-there-policy-setting-trick-x/2275-hide-windows-update-notifications.html

       

    Justin | http://patchmypc.net | Please remember to mark as helpful/answer if this helped you

    Thursday, September 06, 2012 2:14 PM
    Moderator
  • Indeed, this is the GPO setting I am referring to. I am interested in what the best way to deploy this setting is, given that I would like machines to have the Windows Update icon up until the point in which SCCM is successfully running on the system.

    Thursday, September 06, 2012 2:17 PM
  • Thursday, September 06, 2012 2:50 PM
    Moderator
  • Just disable the Windows Update feature in a GPO (not the service, just the feature).

    Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund | Mastering ConfigMgr 2012 The Fundamentals

    Thursday, September 06, 2012 3:00 PM
    Moderator