Forum Discussion

RyanP1895's avatar
RyanP1895
Copper Contributor
Nov 15, 2024

Server 2016 Windows Update disabled?

I have Windows 2016 and 2019 Servers. All in in the same OU and getting the same Group Policy. This is confirmed via gpresult. I am using GP to disable Automatic Updates. This looks to be working i...
Active Directory
Group Policy
Windows Server
Windows Update
kyazaferr's avatar
kyazaferr
MCT
Nov 19, 2024

Computer Configuration > Administrative Templates > Windows Components > Windows Update

    • Confirm that the "Configure Automatic Updates" policy is set to Disabled.
  2. Force Group Policy Update:
    • Run gpupdate /force on the Server 2016 machine and check if the behavior changes.
  3. Clear Pending Updates:
    • If Server 2016 shows pending updates despite the policy:
      • Stop the Windows Update service: net stop wuauserv
      • Delete the contents of C:\Windows\SoftwareDistribution.
      • Start the Windows Update service: net start wuauserv.
    • This clears downloaded updates and ensures the policy is re-applied cleanly.
  4. Check for WaaSMedicSVC Interference:
    • The Windows Update Medic Service can override certain settings. Disable it temporarily to test:
      • Open Services.msc, find Windows Update Medic Service, and set it to Disabled.
      • Monitor behavior after rebooting.
      • Get-WindowsUpdateLog

Resources