Windows Update - Some settings are managed by your Organization

Question

We recently built two new DC servers for our company. Since then, any device (laptop) we join to the domain blocks windows update and shows that the settings are managed by the organization.

But there are no GPOs configured that are disabling windows update. The DC servers are Windows Server 2022.

I found a workaround where we edit the registry keys to allow the windows update but there are a lot of devices and doing the workaround per device is not feasible.

Does anyone know what could be the possible reason for this?

Thanks

Answer 1

Hi Salvi Ali,

Thank you for posting in the Microsoft Community Forum.

You mentioned that you can fix this through registry entries, so have you checked to see if there are settings in the registry entries that disable Windows Update? Something like "WindowsUpdateAccess" is a setting you can check.

You can also check the event logs on the affected devices, especially the event logs about Windows Updates. There may be some error or warning messages that can provide more clues.

Since modifying the registry entries solves the problem, you can configure the GPO to modify the registry entries for all computers in the domain environment.

To create a new Group Policy object or use a long-standing Group Policy object, navigate toComputer Configuration -> Preferences-> Registry in the editor, locate the Registry folder in the right pane, and double-click to open it. Here you can add, modify or delete registry entries.

Best regards

Neuvi Jiang