Disable Windows Update service using Intune

Patrick Mor 46 Reputation points

Hi all,

I have Windows Update workload enabled in Intune and working in all computers via a Update Ring I create and assigned to all devices group.

Now I want to disable Windows update only for a set of computers.

So, I created this group NO UPDATE DEVICES... I added as Exclude Group option on Update Ring.

But I want to have a more restricted configuration too, like creating a Configuration Profile and assigning it to the NO UPDATE DEVICES group, just as a guarantee.

Pls, how can I create a Configuration Profile to disable Windows Update service? See, I wan to disable the service, not stop.

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,718 questions
0 comments No comments
{count} votes

6 answers

Sort by: Most helpful
  1. Philippe Levesque 5,706 Reputation points


    You can push a powershell scrip with intune ?

    I never tried it, but that would do the job;

    Set-ItemProperty -Path "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name NoAutoUpdate -Value 1  
    Stop-Service -name wuauserv -force  
    Set-Service -name wuausrv -startupType disabled  
    0 comments No comments