Forum Discussion

Copper Contributor

Mar 21, 2018

Solved

Forced Upgrades on domain joined machines

I am absolutely defeated by Windows Update, after spending months trying to get it working how I want it, I now have the Upgrade Assistant installing itself onto PC's all over my network. I have WSUS...

Andrew Watson
Mar 25, 2018
https://www.captiongenerator.com/949572/Windows-Update-Hell

SusanBradleyGeek

MVP

Mar 27, 2018

Do you have the deferral set to push off CBB/Semi annual for XXX number of days?

SusanBradleyGeek
MVP
Mar 27, 2018
Is the upgrade assistant you are seeing the modern app one?(which if you are like me and have only Windows 10 pro, you can't control consumer apps installed from the store without upgrading to Enterprise)
- SusanBradleyGeek
  MVP
  Mar 27, 2018
  https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/ You can block the ability for workstations to download from WU
  
  Other admins have been a bit more adventuresome in changing permissions on the upgrade folder: https://community.spiceworks.com/topic/2077036-how-to-block-1709-download-from-windows-update
  - Andrew Watson
    Copper Contributor
    Mar 27, 2018
    I already have the policies in place that are supposed to prevent this from happening.
    
    I even have the policy 'Do not connect to any Windows Update Internet Locations' yet I still have the Update Assistant installing itself constantly onto random machines (not all) which are 1511 or 1607.