This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Disable "Update Settings" on WSUS clients

Question
0

Sign in to vote

Hi,

we deployed WSUS on Windows Server 2019 and the the servers (as WSUS client) get the setting using GPO in the domain.

We want disable using GPO all "Update Settings" (Change Active Hours, Restart Options, Advanced Options) under "SETTINGS > UPDATE & SECURITY" to avoid that any account change these settings.

Unfortunately we could not find any GPO settings options in Administrative Templates.

Any idea?

Best regards

Birdal

Wednesday, July 31, 2019 8:03 AM

All replies

0

Sign in to vote

You control them through Portions of the Windows Updates section along with other parts.

First make sure you're up to date on your ADMX - see part 3 of my guide - https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-3-windows-as-a-service-waas-and-group-policy-administrative-templates/

Then look at part 4 for the policies to manage and set the areas you're talking about.

If you're looking to 'remove' that entire page like you used to be able to do in Control Panel, they don't have that, but you can force out many settings that prevent the changing of the items by users.

Adam Marshall, MCSE: Security
https://www.ajtek.ca
Microsoft MVP - Windows and Devices for IT

Thursday, August 8, 2019 5:20 AM
0

Sign in to vote

Hi,

I was long time not in office.

I will check it.

Bye

Birdal

Tuesday, October 1, 2019 6:34 AM