Server patching automatically when user click "check for update" from update setting.

Question

we managed Windows patching using the WSUS server. After approving any updates from the WSUS server and if I click "check for update" from the update setting, then the Windows update automatically downloads and is installed. It's a normal behavior

I want to stop the automatic installation if I click check for update from the update settings.

Answer 1

You can't. The Check for update button is a "check for update and install available updates" button. If you want the system to regularly check for updates from your WSUS server but only install them at a specific time of day, use GPO and policies like those in Part 4 of my guide.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/

If you do it this way, and set your "Automatic Updates detection frequency" to something like 1 or 2 hours. This way when you approve updates on the WSUS server, a couple of hours later the clients will have checked and downloaded the updates ready to install on the schedule you've provided.