Forum Discussion
horst1337
Apr 27, 2021Copper Contributor
revert settings from GPO
Hello, I tried to disable the ability for our RDS terminalserver users to install windows updates respectively I wanted to disable the message about new updates. So I changed our windows updates...
Seshadrr
Iron Contributor
All GPOs settings are hard-coded with registry , according to your policy settings For users, to Remove access to use all Windows Update features we could edit below registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
DisableWindowsUpdateAccess
Prevents users from connecting to the Windows Update website.
Range = 1|0
1 = Enabled. All Windows Update features are removed.
0 = Disabled or not configured. All Windows Update features are available
I would suggest with creating a new policy with register hive gpo settings referred to above path by deleting the key for one or two server and place it to all servers based on OU / Domain level
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
DisableWindowsUpdateAccess
Prevents users from connecting to the Windows Update website.
Range = 1|0
1 = Enabled. All Windows Update features are removed.
0 = Disabled or not configured. All Windows Update features are available
I would suggest with creating a new policy with register hive gpo settings referred to above path by deleting the key for one or two server and place it to all servers based on OU / Domain level
horst1337
Apr 28, 2021Copper Contributor
Thank you for the reply.
I tryed the folowing settings:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000
sadly non of them worked; the server still shows the message "This option is managed by your organization."
I tryed the folowing settings:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000000
sadly non of them worked; the server still shows the message "This option is managed by your organization."