I configured automated updates to never check and not to allow the user to apply updates both in the original install of win7 and by group policy. It even shows this when I go to updates as a user (it will not allow the user to change these setting, which is correct), but when I try to check and then apply updates as a user it works. Why is this happening>

Hi, This is by design. If you really want to forbid user updating Windows 7, please refer to the following steps. 1.Start the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in (Start, Programs, Administrative Tools, Active Directory Users and Computers). 2.Right-click the container of the users (a site/domain or organizational unit--OU), and select Properties. 3.Go to the Group Policy tab. 4.Select the policy and click Edit. 5.Expand User Configuration, Administrative Templates, Start Menu & Taskbar. 6.Double-click "Disable and remove links to Windows Update." 7.Set this policy to Enabled and click OK. 8.Close all windows.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.