This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 95%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY5%3C/text%3E%3C/svg%3E)
Hi all,
How to find setting disable all online services for windows update except managed services? I already check my GPO setting and nothing weired. Now, only domain admin can update window and all domain user cannot update windows. So, most of PC cannot report back to WSUS. Need advices and suggestion how to disable it and I'm very appreciate it.
https://i.imgur.com/0KT9JcL.png
Thanks a lot.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 24%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Hi yap5285-7901,
Thanks for your posting on this forum.
It seems that there is something wrong with the Group Policy settings. Please help to provide the key values of the registry in the below path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
In addition, it is recommended to refer to configure the group policy as this link:
https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#configure-automatic-updates
Regards,
Rita
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hai RitaHu-MSFT,
Here is the screenshot as requested on my PC. My account in under group Domain Admin. For the GPO setting, hes is my config.
Thanks
It seems that the registry is correct. what is the meaning of "Now, only domain admin can update window and all domain user cannot update windows. So, most of PC cannot report back to WSUS."? Most of the PC not reported on the WSUS console as in the below picture. Is it right?
We could refer to the below steps to confirm whether the connection between the WSUS and the client is correct or not:
Open the IE browser in the client and enter the related URL as your environment:
http://WSUSserver's name:port name(8530 is default)/selfupdate/iuident.cab
For example:http://example.com:8530/selfupdate/iuident.cab
If the connection between the WSUS Server and the client is correct, we could find the below picture:
If there are any updates about this issue, please let me know.
Rita
