Disable all online services for windows updates except managed services GPO

Question

Disable all online services for windows updates except managed services GPO

yap 5285 1

Hi all,

How to find setting disable all online services for windows update except managed services? I already check my GPO setting and nothing weired. Now, only domain admin can update window and all domain user cannot update windows. So, most of PC cannot report back to WSUS. Need advices and suggestion how to disable it and I'm very appreciate it.
https://i.imgur.com/0KT9JcL.png

Thanks a lot.

1 answer

Your answer

Answer 1

Rita Hu -MSFT 9,661

Hi yap5285-7901,

Thanks for your posting on this forum.

It seems that there is something wrong with the Group Policy settings. Please help to provide the key values of the registry in the below path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

In addition, it is recommended to refer to configure the group policy as this link:
https://learn.microsoft.com/en-us/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#configure-automatic-updates

Regards,
Rita

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

yap 5285 1 Reputation point

2020-11-19T04:21:18.877+00:00

Hai RitaHu-MSFT,

Here is the screenshot as requested on my PC. My account in under group Domain Admin. For the GPO setting, hes is my config.

Thanks
Rita Hu -MSFT 9,661 Reputation points

2020-11-19T06:40:45.24+00:00

It seems that the registry is correct. what is the meaning of "Now, only domain admin can update window and all domain user cannot update windows. So, most of PC cannot report back to WSUS."? Most of the PC not reported on the WSUS console as in the below picture. Is it right?

We could refer to the below steps to confirm whether the connection between the WSUS and the client is correct or not:
Open the IE browser in the client and enter the related URL as your environment:
http://WSUSserver's name:port name(8530 is default)/selfupdate/iuident.cab

For example:http://example.com:8530/selfupdate/iuident.cab

If the connection between the WSUS Server and the client is correct, we could find the below picture:

If there are any updates about this issue, please let me know.

Rita

Share via

Disable all online services for windows updates except managed services GPO

1 answer

Your answer