Disable windows updates through group policy

Unfortunately, when automatic updates are being installed without your approval , you cannot take this precautionary step and face the possibility of having to resort to an older backup if you need to go back past the update.

Many updates need to reboot your machine when complete and certainly take up bandwidth while downloading. This can lead to slower response time and unforeseen reboots that can cause havoc with your work life. So there are indeed valid reasons to turn off automatic updates in Windows Just be careful not to turn the service off and forget to check for updates.

While automatic updates can be problematic, letting your system lag behind critical updates can also have serious consequences. Jeff Cochin is a data management and recovery expert. He also serves as a technical writer, testing and reviewing tech solutions in various fields. Jeff Cochin is a professional data management, warehousing and recove Updated on April 30, Written by. Jeff Cochin. Approved by. Brett Johnson. The below screenshot is from a computer that is just joined to the AD domain and managed by Configuration Manager.

Notice that check for updates button is active and enabled. In addition, there is a cumulative update available for installation. If the user clicks download and install, the quality update will download from Microsoft update and install on the computer.

Therefore, in most organizations, a group policy is deployed to the client computers to disable check online for updates from Microsoft update site. The group policy setting essentially blocks the access to Windows update. If you enable this policy setting, user access to Windows Update scan, download and install is removed.

The best way to disable check for updates on computers is by using group policy GPO. Group Policy can be used to apply security settings to users and computers. The Group Policy allows administrators to define security policies for users and for computers. When you create a group policy, you either deploy it to the entire AD domain or select Organizational Units.

Whenever you create a new GPO, ensure you test it on pilot computers and then deploy it to wider set of computers. Click OK. Edit the GPO and specify the settings to disable check for updates. Any link to or advocacy of virus, spyware, malware, or phishing sites.

Any other inappropriate content or behavior as defined by the Terms of Use or Code of Conduct. Any image, link, or discussion related to child pornography, child nudity, or other child abuse or exploitation. Was this reply helpful? Yes No. Sorry this didn't help. Thanks for your feedback. I have the same question Report abuse.