Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Tuesday, April 24, 2018 7:08 AM | 1 vote
We have a fleet of machines running Windows 10 Pro, and having all sorts of issues with windows updates.
Since I applied policy settings to prevent windows update and restrict these to only WSUS and admins, I've not been able to remove the "Disable check for updates by user" policy.
Following through another few threads I can see there's registry keys to remove and try again. But all efforts have failed so far.
Have tried:
Updated admx templates
Disabling WSUS policy for whole network. Gpupdate & gpupdate /force
Deleting policy records in:
HKLM\SOFTWARE\POLICIES\MICROSOFT
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\GROUP POLICIES
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\GROUP POLICIES
gpupdate /force and refreshing those policies.
I've removed the computer from the domain, and deleted those policies again - no change
GP update while in a workgroup, no change.
Whether I'm logged on as domain admin or local admin in those instances, I still can't hit the Install now.
When looking at the windows update setting that remains applied, it's "disable check for updates by user".
Pulling my hair out over this one.
I don't want to rebuild any machines, as they often go on the road for really long periods at a time and connect back with VPN.
All replies (5)
Wednesday, April 25, 2018 2:03 AM
Hi,
Sorry you can’t do like that, because Microsoft doesn’t have official tools to perform this task, it is made by design.
Thank you for understanding.
Best Regards,
Tao
Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected].
Wednesday, April 25, 2018 11:15 AM
Hi,
Sorry you can’t do like that, because Microsoft doesn’t have official tools to perform this task, it is made by design.
Thank you for understanding.
Best Regards,
Tao
Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected].
Can you please be more specific?
Microsoft doesn't have specific tools to perform what task?
What is by design? Allowing a policy to be set by an admin, then not letting them un-set it?
Wednesday, April 25, 2018 11:17 AM
To explain the situation right now.
I have a laptop that has about 20 updates "awaiting install".
I can't select Install now, it's greyed out. The policy originally set the install time to be 3am.
These don't get left on overnight (especially when travelling), so basically these will never update.
Saturday, April 28, 2018 12:32 PM
Hi,
Sorry you can’t do like that, because Microsoft doesn’t have official tools to perform this task, it is made by design.
Thank you for understanding.
Best Regards,
Tao
Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected].
Hi,
I'm following this up again.
I've run DISM and SFC and the windows update troubleshooter, and STILL cannot remove the policy.
Wednesday, May 2, 2018 1:43 PM | 5 votes
We had a similar problem, dealing with VMWare and its Optimization tool, it pushed a registry entry that disabled the button to check for updates. You may need to delete this DWORD (don't set it to zero):
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate:SetDisableUXWUAccess
*Edit* Actually I see that you just deleted the policies. I think that is the problem, I tried recreating my solution and deleting doesn't work. I had to update the values to 0 (disable the disable) then I gpupdate, restarted, then I deleted the record. Sequence seems to matter.
Hope it helps, I burned a day on this.
Regards,
ACG