Home / server / Questions / 680664
Accepted
Aravinda
Asked: 2015-04-07 02:20:49 +0800 CST

Is there a way to disable "check online for updates from windows update" in windows update settings?

  • 772

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS.

Intranet WSUS server pointing to client pc and other settings are pushed via group policies in Domain controller 2003.

Following policies are configured in the domain..

Computer configuration section

enter image description here

User configuration section

enter image description here

and its correctly configured in the clients in this manner..

enter image description here

yet I wish to disable/remove ,

(1) Ability for users to check the updates (since its automatically scheduled to install at friday 4 pm)

(2) Ability for users to install the updates

(3) ability to check online for updates from windows (Only i want wsus to be the source of download)

If I out line above 3 facts, in the windows 7 client settings its below what i Wish to disable

enter image description here

Is this possible using existing Server 2003 Group policies ? To achieve above 3 requirements? As clients we do have windows xp,7,8,8.1 that needs above 3 requirements.

Any help would be greatly appreciated.

windows-server-2003

1 Answers

  1. Best Answer

    There are settings in the Server 2008/2012 policies that aren't accessible on your 2003 server I believe, such as "Do not connect to any Windows Update Internet locations" under the Computer settings you show above.

    I believe the settings you are looking for in a 2003 environment are:

    Disable access to Windows Update

    The correct policy for v6 operating systems to achieve the desired objective is: Turn off access to all Windows Update features

    and is located in Administrative Templates | System | Internet Communication Management | Internet Communication Settings

    If this policy setting is enabled, all Windows Update features are removed. It blocks access to the Microsoft Update and Windows Update Web sites, and in Windows Vista will gray out the Check for updates option in the Windows Update application. The machine will not get automatic updates directly from Windows Update or Microsoft Update, but it can still get updates from a WSUS server. This setting overrides the user settings Remove links and access to Windows Update and Remove access to use all Windows Update features. To disable access to Windows Update
    1.In the Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand System, expand Internet Communication Management, and then click Internet Communication settings.

    2.In the details pane, click Turn off access to all Windows Update features, and click Enabled.

    3.Click OK.

    • 10