2.3. Disabling Windows Update

Problem

You want to prevent a user from running Windows Update or Automatic Updates.

Solution

Using a graphical user interface

  1. Open the Group Policy Management Console.

  2. In the left pane, navigate to the GPO you want to modify.

  3. Right-click the target GPO and select Edit.

  4. In the left pane of the Group Policy Object Editor, expand User Configuration Administrative Templates Start menu and Taskbar.

  5. In the right pane, double-click Remove links and access to Windows Update (for Windows Server 2003) or Disable and Remove Links to Windows Update (for Windows 2000).

  6. Select Enable and click OK.

Using a command-line interface

To disable Windows Update for all users who haven't logged in previously, run the following command:

> reg add HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /t
REG_DWORD /v NoWindowsUpdate /d 1

To disable Windows Update for the user who is currently logged on, run the following command:

> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /t REG_
DWORD /v NoWindowsUpdate /d 1

Using VBScript

' This code disables Windows Update in the .Default profile. ' ------ SCRIPT CONFIGURATION ------ strComputer = "." ' ------ END CONFIGURATION --------- const HKEY_USERS = &H80000003 strKey = ".DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" set objReg=GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") objReg.SetDwordValue HKEY_USERS, strKey, "NoWindowsUpdate", 1 WScript.Echo ...

Get Windows Server Cookbook now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.