Forum Discussion

Happyuppy123's avatar
Happyuppy123
Copper Contributor
Jul 26, 2022

Automatic updates disabled by group policy but no policy exists to disable them?

We are working on moving one of our domains to Windows 10. We have several test machines set up as Hybrid AAD joined.

 

The machines are all reporting that Automatic Updates have been disabled by Group Policy. However, there are no policies set up on the domain that control Automatic Updates. I ran a gpresult on one of the machines and the report does not contain any information suggesting the Automatic Update settings have been changed.

 

We have Automatic Updates configured as 'Auto install and restart at a scheduled time' in Intune, and we also have the 'MDM wins over GP' setting set.

 

The machines do appear to be updating themselves, however, Windows Update reporting that updates are disabled is an issue as we can't install anything from the Microsoft Store as it stated that Windows Update is turned off.

 

Any ideas?

  • Icarly's avatar
    Icarly
    Copper Contributor
    Re-run the Windows Update troubleshooter and follow its recommendations. Reset the Windows Update settings to their default values using the following command: net stop wuauserv && net start wuauserv, and remove any conflicting registry keys or settings using the Registry Editor.
    Check for any software updates or patches that might be causing the issue and apply them if necessary.
    If none of the above steps resolve the issue, try recreating the MDM configuration in Intune or resetting the MDM agent on the affected machine.
    If you're still unable to resolve the issue, please provide more information about your environment, such as your Intune configuration, Windows 10 version, and any other relevant details.
  • ErnestB77's avatar
    ErnestB77
    Copper Contributor

    Do you have an RMM. We have n-able RMM used to be SolarWinds. when its patch management is enabled on our PCs Windows update indicates that it is disabled by a group policy.

    Happyuppy123 

    • EARaghu's avatar
      EARaghu
      Copper Contributor

      ErnestB77 Hi Ernest.  This was our issue.  Thanks very much for the post.  Best!

    • rachelgomez161999's avatar
      rachelgomez161999
      Iron Contributor
      To disable automatic updates on Windows 10 permanently, use these steps:

      Open Start.
      Search for gpedit.msc and click the top result to launch the Local Group Policy Editor.
      Navigate to the following path: Computer Configuration > Administrative Templates > Windows Components > Windows Update
      Double-click the "Configure Automatic Updates" policy on the right side.
      Configure Automatic Updates policy

      (Image credit: Future)
      Check the Disabled option to turn off automatic Windows 10 updates permanently.
      Group Policy disable Windows Update

      (Image credit: Future)
      Click the Apply button.
      Click the OK button.
      After you complete the steps, Windows 10 will stop downloading updates automatically. However, the ability to check for updates manually will continue to be available on Settings > Update & Security > Windows Update, and clicking the Check for updates button to download the most recent patches as needed.

      If you want to enable automatic updates on the computer again, you can use the same instructions outlined above, but in step 5, make sure to select the Not Configured option.

      This may help you,
      Rachel Gomez
      • Bartb395's avatar
        Bartb395
        Copper Contributor

        rachelgomez161999 

        I have done just that. Configure Automatic Updates is set to Disabled. And yet, it still automatically downloads updates and wants you to do a restart. The reason I have been trying to stop update is because: When Windows attempts to install 22H2, it goes through the update paces, does a restart, continues updating, then at 99% it says there is a Windows Error and updates will be undone. So I have to wait and wait for that process.  This problem has gone on for 17 months now. I have tried every Microsoft fix out there and nothing fixes this. I even increased my MBR to 1000GB because they were so confident that was the issue. Well, it wasn't. Didn't work. Nothing from Microsoft works and I'm just tired of Microsoft BUGS taking up my time.

Resources