Forum Discussion

Marco2706's avatar
Marco2706
Copper Contributor
Sep 21, 2022

Disable Windows Update on Windows server 2019 (1809)

Hi to all,

we need to disable windwos update on my organization on windows server 2019.

We try to deploy a GPO that disable a Windows Update service but it's still work again and last night downloded and install on production server update and reboot machine. This cause a very big issue for us.

Can we help to find a correct workaround to disable it and enable only when we need to upgrade a machine?

Thanks for the support

Marco 

Windows Server

8 Replies

Sort By
  • bdionisogr1's avatar
    bdionisogr1
    Copper Contributor
    Sep 21, 2022
    Hello Marco, there are several solutions for that, the first is with sconfig command as describe in the following page
    https://www.osradar.com/disable-automatic-updates-in-windows-server-2019-2016/
    ...or....
    You can go to the following page and at the middle there are the procedure on how to change the setting from registry (first test it on a dev server)
    https://learn.microsoft.com/en-us/windows/deployment/update/waas-wu-settings#configure-automatic-updates

    BR,
    • Marco2706's avatar
      Marco2706
      Copper Contributor
      Sep 22, 2022

      HI bdionisogr1 thanks for you repaly and for the workaround that we send us.

      We tru to applya second link on a dev server and set a NoAutoRebootWithLoggedOnUsers (REG_DWORD) regkey to manage the updates.

       

      We find and try another workaround that we send on this link

      https://www.wintips.org/how-to-turn-off-windows-10-updates-permanently/

      we try to apply the steps 2  on server and after set this key updates not start

      thanks 
      marco 

       

       

       

       

       

  • Harm_Veenstra's avatar
    Harm_Veenstra
    MVP
    Sep 21, 2022
    What are your settings in the GPO and when you run a rsop.msc on the server, do you see the settings being applied?
    • Marco2706's avatar
      Marco2706
      Copper Contributor
      Sep 22, 2022

      Hi Harm_Veenstra we run the rsop.msc ont he machine and we can find a Windows Update service on disable state on the server's 

      at the follow the setting that we set on policy for disable update

       

      please let me know if we make a mistake to set it. The domain controller that where set a GPO it's a Windows 2012R2 server

      Thanks a lot

      Marco

      • Harm_Veenstra's avatar
        Harm_Veenstra
        MVP
        Sep 22, 2022
        Do you also disable the Software Protection service? Only the Windows Update service is needed, but in fact, I think that only setting the Windows Update settings to disabled should be enough. The Windows Update service will still be running, but in the Windows Update control panel, you should see that it's not configured/disabled.

Resources