T
tickermcse76
I recently implemented a basic GPO in a mixed 2008R2/2012R2/2016/2019 environment to restrict users from changing the download/install settings for Windows Update. A third party application is used to deploy the updates and the GPO was primarily meant to prohibit a user from configuring automatic download and install. DC's are running 2016.
The registry values deployed by the GPO are:
NoAutoUpdate - 1
NoAutoRebootWithLoggedOnUsers - 1
For 2008R2/2012R2 - the menu option to is locked and shows option 2 as desired. However on 2016 OS - the Windows Update -> Update Settings still displays a description of "Available updates will be downloaded and installed automatically...".
Is that a static value that does not change in 2016? I have confirmed the desired registry values are pushed to the server.
Continue reading...
The registry values deployed by the GPO are:
NoAutoUpdate - 1
NoAutoRebootWithLoggedOnUsers - 1
For 2008R2/2012R2 - the menu option to is locked and shows option 2 as desired. However on 2016 OS - the Windows Update -> Update Settings still displays a description of "Available updates will be downloaded and installed automatically...".
Is that a static value that does not change in 2016? I have confirmed the desired registry values are pushed to the server.
Continue reading...