Tech Community Live: Windows edition
Jun 05 2024, 07:30 AM - 11:30 AM (PDT)
Microsoft Tech Community

Automatic updates disabled by group policy but no policy exists to disable them?

Copper Contributor

We are working on moving one of our domains to Windows 10. We have several test machines set up as Hybrid AAD joined.

 

The machines are all reporting that Automatic Updates have been disabled by Group Policy. However, there are no policies set up on the domain that control Automatic Updates. I ran a gpresult on one of the machines and the report does not contain any information suggesting the Automatic Update settings have been changed.

 

We have Automatic Updates configured as 'Auto install and restart at a scheduled time' in Intune, and we also have the 'MDM wins over GP' setting set.

 

The machines do appear to be updating themselves, however, Windows Update reporting that updates are disabled is an issue as we can't install anything from the Microsoft Store as it stated that Windows Update is turned off.

 

Any ideas?

8 Replies

Do you have an RMM. We have n-able RMM used to be SolarWinds. when its patch management is enabled on our PCs Windows update indicates that it is disabled by a group policy.

@Happyuppy123 

To disable automatic updates on Windows 10 permanently, use these steps:

Open Start.
Search for gpedit.msc and click the top result to launch the Local Group Policy Editor.
Navigate to the following path: Computer Configuration > Administrative Templates > Windows Components > Windows Update
Double-click the "Configure Automatic Updates" policy on the right side.
Configure Automatic Updates policy

(Image credit: Future)
Check the Disabled option to turn off automatic Windows 10 updates permanently.
Group Policy disable Windows Update

(Image credit: Future)
Click the Apply button.
Click the OK button.
After you complete the steps, Windows 10 will stop downloading updates automatically. However, the ability to check for updates manually will continue to be available on Settings > Update & Security > Windows Update, and clicking the Check for updates button to download the most recent patches as needed.

If you want to enable automatic updates on the computer again, you can use the same instructions outlined above, but in step 5, make sure to select the Not Configured option.

This may help you,
Rachel Gomez

@rachelgomez161999 

I have done just that. Configure Automatic Updates is set to Disabled. And yet, it still automatically downloads updates and wants you to do a restart. The reason I have been trying to stop update is because: When Windows attempts to install 22H2, it goes through the update paces, does a restart, continues updating, then at 99% it says there is a Windows Error and updates will be undone. So I have to wait and wait for that process.  This problem has gone on for 17 months now. I have tried every Microsoft fix out there and nothing fixes this. I even increased my MBR to 1000GB because they were so confident that was the issue. Well, it wasn't. Didn't work. Nothing from Microsoft works and I'm just tired of Microsoft BUGS taking up my time.

@Bartb395 Change your primary hard drive's partitioning scheme from GPT to MBR That will prevent the update to 22H2, as version 22H2 is only compatible with a GPT drive. Converting the partitioning scheme is easy to do, and can be done while in windows. Just open CMD with administrator privileges, and proceed to type the commands. This video below, should help you convert your primary drive to MBR without any data loss.

https://www.youtube.com/watch?v=a54sqzcDrUU

Of course, make sure you instruct the system to convert your selected drive MBR and not GPT. 

@urbanchaos 

 

Thanks urbanchaos for the reply. Sorry to get to you late on this. I cannot perform the task you recommended because my primary partition is already set to MBR (always has been). You said that 22H2 is only compatible with GPT partitions and thus would "prevent" the update for 22H2, but that appears not to be true (since it is trying to install 22H2 with an MBR primary partition). However, could this incompatibility be the initial problem? And as 22H2 is not being prevented, that yet may be a second issue.  Should I go the other route and convert "TO" GPT on the primary partition?

Re-run the Windows Update troubleshooter and follow its recommendations. Reset the Windows Update settings to their default values using the following command: net stop wuauserv && net start wuauserv, and remove any conflicting registry keys or settings using the Registry Editor.
Check for any software updates or patches that might be causing the issue and apply them if necessary.
If none of the above steps resolve the issue, try recreating the MDM configuration in Intune or resetting the MDM agent on the affected machine.
If you're still unable to resolve the issue, please provide more information about your environment, such as your Intune configuration, Windows 10 version, and any other relevant details.

@ErnestB77 Hi Ernest.  This was our issue.  Thanks very much for the post.  Best!