Windows Update group policy problems

Heres how I want my windows update function to work.

1 - Choose How I install windows is set to never check for updates.

2 - The option to 'check for updates' should be available and connect to the internet to check when selected.

My problem is that 'check for updates' seems to change to say "this machine is magaed by sys admin etc" 

If I upadte the registry to "NoWindowsUpdate"=dword:00000001 - it then lets me run check for updates. If I reboot then 

the administered by sys admin message is there again.

I am the administraotr and theres no other group policies in place! Any ideas

July 31st, 2015 10:34am

Do you have one of these set in GPO?

You can use Group Policy settings to disable both Windows Update and Automatic Updates.

To disable Windows Update and Automatic Updates on a per-computer basis, configure Turn off access to all Windows Update features in Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings

To disable access to Windows Update and Automatic Updates on a per-user basis, configure Remove links and access to Windows Update in User Configuration\Administrative Templates\Start Menu and Taskbar. Enabling this policy setting removes access to Windows Update features for the specified user, but Automatic Updates still checks for updates for the computer and does not notify users with this policy set.

The GPO setting under Computer-Windows Components-Windows Update-Configure Automatic Updates.  Setting to disabled will set the drop down to 'Never Look for Updates'  The two above will control the button "check for updates".  I tested and that is my finding.


Just to be sure, run a GPResult or RSOP.
Free Windows Admin Tool Kit Click here and download it now
July 31st, 2015 1:27pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics