Forum Discussion
Update servers with Arc, but leave SCCM installed
We have multiple servers that we want to update with Arc instead of SCCM. Want to leave SCCM installed for reporting purposes. We found a few registry keys that point to the on-prem SCCM server. I've tried removing them, but they are reinstalled by the client after a reboot. Is there a clean way to disable this feature so that Arc handles all the monthly updates?
1 Reply
Below are the conceptual steps:
- Disable SCCM Software Updates Policy
- In SCCM, navigate to Administration > Client Settings and disable Software Updates.
- Ensure that Windows Update settings are configured to use Azure Update Manager instead.
- Modify Group Policy (GPO) to Prevent SCCM from Controlling Updates
- Open Group Policy Editor (gpedit.msc).
- Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update.
- Set "Specify intranet Microsoft update service location" to Not Configured or point it to Azure Update Manager.
- Manually Configure Windows Update to Use Azure Arc
- Run the following PowerShell command to reset Windows Update settings:
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /f- Ensure that Azure Update Manager is properly configured to handle updates.
- Check SCCM Client Settings for Automatic Reinstallation
- SCCM may have a client policy that reinstalls registry keys after a reboot.
- Review SCCM Client Settings and disable any policies related to Windows Update management.
- Monitor Registry Changes Using Process Monitor
- Use Sysinternals Process Monitor to track which process is restoring the registry keys.
- If SCCM is enforcing the changes via a scheduled task or policy, disable that mechanism.
