none
Windows Update group policy problems

    Question

  • Heres how I want my windows update function to work.

    1 - Choose How I install windows is set to never check for updates.

    2 - The option to 'check for updates' should be available and connect to the internet to check when selected.

    My problem is that 'check for updates' seems to change to say "this machine is magaed by sys admin etc" 

    If I upadte the registry to "NoWindowsUpdate"=dword:00000001 - it then lets me run check for updates. If I reboot then 

    the administered by sys admin message is there again.

    I am the administraotr and theres no other group policies in place! Any ideas

    Friday, July 31, 2015 2:26 PM

Answers

  • Do you have one of these set in GPO?

    You can use Group Policy settings to disable both Windows Update and Automatic Updates.

    To disable Windows Update and Automatic Updates on a per-computer basis, configure Turn off access to all Windows Update features in Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings

    To disable access to Windows Update and Automatic Updates on a per-user basis, configure Remove links and access to Windows Update in User Configuration\Administrative Templates\Start Menu and Taskbar. Enabling this policy setting removes access to Windows Update features for the specified user, but Automatic Updates still checks for updates for the computer and does not notify users with this policy set.

    The GPO setting under Computer-Windows Components-Windows Update-Configure Automatic Updates.  Setting to disabled will set the drop down to 'Never Look for Updates'  The two above will control the button "check for updates".  I tested and that is my finding.


    Just to be sure, run a GPResult or RSOP.
    Friday, July 31, 2015 5:19 PM