none
disable software install/updates during businesshours

    Question

  • Guys,

    Is it possible to block software installs during businesshours when pc's have been shutdown?

    Cause when software is applied to a computer and someone shutsdown that computer, those updates are applied the next time the computer starts.

    Tuesday, April 21, 2015 7:48 AM

Answers

  • >     then click *Windows Update*.
     
    This will not prevent MSI installations by GPO during reboots... If the
    TO uses GPO to deploy MSI and startup scripts, there's no comfortable
    way to prevent these from happening during business hours.
     
    For MSI, the easiest workaround would be a dedicated server hosting the
    source files, and that server is simply powered down (plugged out)
    during the day. And in scripts, you might check the current time and
    exit prematurely if required.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Tuesday, April 21, 2015 1:49 PM

All replies

  • Hi enlil,

    In fact there is this Group Policy that you can apply on domain level:

    1. In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

    2. In the details pane, click Reschedule Automatic Update scheduled installations, click Enable, and type a value in minutes.

    3. Click OK.

    This will allow you to schedule the installation X minutes after the system start. Setting a period, longer that the working hours will cause the installation to occur outside the business hours.

    Hope it helps


    Tuesday, April 21, 2015 1:13 PM
  • >     then click *Windows Update*.
     
    This will not prevent MSI installations by GPO during reboots... If the
    TO uses GPO to deploy MSI and startup scripts, there's no comfortable
    way to prevent these from happening during business hours.
     
    For MSI, the easiest workaround would be a dedicated server hosting the
    source files, and that server is simply powered down (plugged out)
    during the day. And in scripts, you might check the current time and
    exit prematurely if required.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Tuesday, April 21, 2015 1:49 PM
  • >     then click *Windows Update*.
     
    This will not prevent MSI installations by GPO during reboots... If the
    TO uses GPO to deploy MSI and startup scripts, there's no comfortable
    way to prevent these from happening during business hours.

    Totally agree. Somehow I assumed that the issue was referring the installation of pending WAU jobs.

    Regards,

    Wednesday, April 22, 2015 3:03 PM
  • Hi,

    How is it going? I agree with others.  If you need further help regarding the question, please don't hesitate to let us know.

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, April 24, 2015 2:10 AM
    Moderator
  • I am indeed refering to regular software installations, not to windows updates.
    Friday, April 24, 2015 5:56 AM