Disable Windows Update service using Intune

Question

Hi all,

I have Windows Update workload enabled in Intune and working in all computers via a Update Ring I create and assigned to all devices group.

Now I want to disable Windows update only for a set of computers.

So, I created this group NO UPDATE DEVICES... I added as Exclude Group option on Update Ring.

But I want to have a more restricted configuration too, like creating a Configuration Profile and assigning it to the NO UPDATE DEVICES group, just as a guarantee.

Pls, how can I create a Configuration Profile to disable Windows Update service? See, I wan to disable the service, not stop.

Answer 1

Hi

You can push a powershell scrip with intune ?

I never tried it, but that would do the job;

Set-ItemProperty -Path "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name NoAutoUpdate -Value 1  
Stop-Service -name wuauserv -force  
Set-Service -name wuausrv -startupType disabled