Home / server / Questions / 239818
Accepted
shaiss
Asked: 2011-02-25 08:22:57 +0800 CST

Disable a microsoft update item via command line

  • 772

We have 5000+ servers and need to hide the 2008R2 SP1 so that our users don't accidentally install the service pack. I can use PSEXEC, powershell, ect. Is there a way to do this from command line so that we don't have to use the gui on each of the 5000+ machines?

windows-server-2008 command-line-interface windows-update

2 Answers

  1. Best Answer

    Microsoft released a tool for that purpose: Windows Service Pack Blocker Tool Kit.

    Microsoft text: "A blocking tool is available for organizations that would like to temporarily prevent installation of Service Pack updates through Windows Update.

    This tool can be used with: Windows 7 Service Pack 1 (valid through 2/22/2012) Windows Server 2008 R2 Service Pack 1 (valid through 2/22/2012)

    This toolkit contains three components. All of them function primarily to set or clear a specific registry key that is used to detect and block download of Service Packs from Windows Update. You only need to use the component which best serves your organization’s computer management infrastructure. 1. A Microsoft-signed executable 2. A script 3. An ADM template "

    Hope this helps, Cheers

    • 4

  2. You could use Group Policy to disable the Windows Update/Automatic Updates service or use Group Policy to prevent users from accessing Windows Update.

    • 0