Hi All,

We are using WIndows server 2008 R2 WSUS. it has been configured by previous administrator.

How do we disable the WSUS from pushing up the updates automatically to clients including servers and computers?

Thanks.

Hi

 Open GPMC ->edit wsus gpo->Computer configuration->Policies->Administrative Templates->Windows Componenets->Windows Update ;

- Configure Automatic Updates select 5 Allow local admin to choose settings,

or if you disabled this wsus could not push autmatic updates.

Hi

 Open GPMC ->edit wsus gpo->Computer configuration->Policies->Administrative Templates->Windows Componenets->Windows Update ;

- Configure Automatic Updates select 5 Allow local admin to choose settings,

or if you disabled this wsus could not push autmatic updates.

Hi Burak,

are we doing from the WSUS server? I think we need to disable the WSUS server from pushing down any updates ASAP as some updates cause software corruption.

Thanks.

Regards,

Hi

 You can decline the "approved" updates on WSUS,but did you know which update cause to corruption.

Hi

 You can decline the "approved" updates on WSUS,but did you know which update cause to corruption.

hi Burak,

what do you mean by decline the approved updates?? do you have any steps on how to do that?

Basically, we still don't know which one cause corruption. that's why we need to temporarily stop the server from pushing down.

Thanks

Hi

 There is 3 way completely stops wsus,

- on wsus server go to "services" and stop "wsus service" this stops the wsus

- and open wsus console->expand updates->approval select approved->select all updates->right click and select "decline"

- And also you can disable wsus gpo on GPMC.

i think first steps you need stop the wsus service asap.

• Edited by Burak Uur 20 hours 27 minutes ago

Hi

 There is 3 way completely stops wsus,

- on wsus server go to "services" and stop "wsus service" this stops the wsus

- and open wsus console->expand updates->approval select approved->select all updates->right click and select "decline"

- And also you can disable wsus gpo on GPMC.

i think first steps you need stop the wsus service asap.

Hi Burak,

under services there are no services called "wsus service"

please advice.

thanks

you need to stop&disable wsus service on WSUS Server;

check my screen shot on wsus server services;

you need to stop&disable wsus service on WSUS Server;

check my screen shot on wsus server services;

Hi Burak,

I can't find the WSUS service under my services. What could be the issue causing this? is it because the version of windows are different hence there is another way of disabling the wsus services? I am using Windows server 2008 R2 SP1.

Thanks.

Hi

 run on cmd console "net stop WSUSService" but it is not depends on version,so it is service.Are you able to Access WSUS console on this server??

Hi

 There is 3 way completely stops wsus,

- on wsus server go to "services" and stop "wsus service" this stops the wsus

- and open wsus console->expand updates->approval select approved->select all updates->right click and select "decline"

- And also you can disable wsus gpo on GPMC.

i think first steps you need stop the wsus service asap.

• Edited by Burak Uur Friday, June 26, 2015 10:33 AM

Hi

 run on cmd console "net stop WSUSService" but it is not depends on version,so it is service.Are you able to Access WSUS console on this server??

Hi Burak,

yes. I am able to open the Update  Services just like the figure below:

When I try to run the Net Stop WSUSSERVICE, I get access denied message. That's funny. I am the administrator here and my login is the domain admin.

Another thing is, I can see a lot of updates status as "Not Approved". does it mean that those won't be pushed down till the administrator approved them? will it automatically approved?

Thanks.

Regards,

Hi

 Please run cmd as run as administrator.Yes this means unapproved updates don't push the clients,til you could approved them,And also you could decline the updates on this console.