Disabling automatic updates

[Ricoli610]

Hello

We are trying to disable automatic updates using group policy.  We are deploying the Stable channel release and have the following policies Enabled and set to Updates disabled:

Update policy override default

Update policy override    (the Stable channel option)

We have some end points where the browser is automatically updating itself to the most recent version.  It is not always the same end point.  Each time it happens, when we check the above policies and the About page, we find that updates are disabled / managed by the organisation.

I have read on:

https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-update-policies

That there are two other settings:

Allow installation default

Allow installation    (by channel)

Should we also be setting one of these Allow installation policies to prevent new versions of the browser automatically installing, or should the Update policy override default and Update policy override settings we are already using be sufficient?

During our initial testing it appeared that setting Allow installation default to Disabled caused the SCCM deployment to fail.

Any guidance would be much appreciated.

Many thanks

Richard

[#2 · Accepted solution]

@Ricoli610 if you deploy Edge using SCCM you select the default channel in SCCM and configure the auto update in SCCM. SCCM handles that and the automatic update within Edge is disabled.

This does need no extra configuration. 

https://docs.microsoft.com/en-us/mem/configmgr/apps/deploy-use/deploy-edge

What do want to achieve? What version of SCCM / MECM do you have in place?

Regards, Henno

[#3]

@Henno_Keers  Thanks very much for your reply.

We are using SCCM / MECM 2002 version 5.0.8968.1000.  Edge is being deployed as an application using the msi - MicrosoftEdgeEnterpriseX64 (Software Library / Application Management).

We are trying to ensure that Edge does not update unless we deploy a new version via SCCM.  We have had a small number of clients where the browser has updated itself (not via SCCM).  The group policy settings I mention above are set and the browser shows Your organization disabled updates when we check the About page.

The guidance in the link you posted advises that, on the clients, the PowerShell Execution Policy can't be set to Restricted.  This may not be something that we are able to get approval to change.

Many thanks

Richard