none
Group Policy Windows Update

    Question

  • Is there a way to disable Windows Update when computers are connected to the domain and then have it enabled when the are off the domain?
    Thursday, August 20, 2015 8:14 PM

Answers

  • Neither Group Policy nor WSUS offer this feature, because it's not a native feature of WUAgent.

    It can be done via ConfigMgr, because ConfigMgr orchestrates the WUAgent by using API calls.

    Other third-party products might also offer an equivalent feature if they use API calls to WUAgent.

    I'm not familiar with how Kace operates, but if there is an agent on the client for Kace, then check if Kace offers such a feature via that agent.


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Friday, August 21, 2015 7:59 AM

All replies

  • "when they are off the domain" ??

    Do you mean, "when not connected to the office network / cannot contact a Domain Controller" ?

    Or do you mean "non-domain-member machines, e.g. Workgroup '?

    Are you meaning windowsupdate.com or WSUS ?


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Thursday, August 20, 2015 9:37 PM
  • Yes I mean when not connected to the office network / cannot contact a domain controller.  We want users to be able to connect to windowsupdate.com if they are on vacation or traveling but when in the office we use Kace to push out updates and don't want them to run windows update manually.
    Thursday, August 20, 2015 9:48 PM
  • Neither Group Policy nor WSUS offer this feature, because it's not a native feature of WUAgent.

    It can be done via ConfigMgr, because ConfigMgr orchestrates the WUAgent by using API calls.

    Other third-party products might also offer an equivalent feature if they use API calls to WUAgent.

    I'm not familiar with how Kace operates, but if there is an agent on the client for Kace, then check if Kace offers such a feature via that agent.


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Friday, August 21, 2015 7:59 AM