Announcement

Collapse
No announcement yet.

Automatic updates settings created by GPO, Quickest way to remove?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Automatic updates settings created by GPO, Quickest way to remove?

    Hello,
    It has been a while since I have posted, I just landed a dream job working with a company called Infocrossing. I thank everyone who has helped me in the past with the certifcation stuff.

    I have a new question, a policy was set to push automatic updates, then a reboot time. I know undoing that has to be with a reg edit. Can someone point me in the right direction?

    Thanks
    Certifiedgeek05

  • #2
    Re: Automatic updates settings created by GPO, Quickest way to remove?

    I push automatic updates from a WSUS server, and i use GPO to specify the server name, and options.

    have a look at this :

    http://technet2.microsoft.com/window....mspx?mfr=true

    about a reg file u can use to force the change manually:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate]
    "ElevateNonAdmins"=dword:00000000
    "WUServer"="http://WSUSNAME.DOMAIN.NAME:8530"
    "WUStatusServer"="http://WSUSNAME.DOMAIN.NAME:8530"
    "TargetGroupEnabled"=dword:00000001
    "TargetGroup"="IsrBeeper"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU]
    "AutoInstallMinorUpdates"=dword:00000001
    "NoAutoUpdate"=dword:00000000
    "AUOptions"=dword:00000004
    "ScheduledInstallDay"=dword:00000000
    "ScheduledInstallTime"=dword:00000003
    "NoAutoRebootWithLoggedOnUsers"=dword:00000001
    "UseWUServer"=dword:00000001
    "RescheduleWaitTimeEnabled"=dword:00000001
    "RescheduleWaitTime"=dword:00000005
    "DetectionFrequencyEnabled"=dword:00000001
    "DetectionFrequency"=dword:00000022
    "RebootWarningTimeoutEnabled"=dword:00000001
    "RebootWarningTimeout"=dword:00000005
    "RebootRelaunchTimeoutEnabled"=dword:00000001
    "RebootRelaunchTimeout"=dword:00000005

    Retaliator.
    Thanks & Regards

    Retaliator

    MCSA/MCSE/CCNA
    Computer Science Graduate

    Comment


    • #3
      Re: Automatic updates settings created by GPO, Quickest way to remove?

      Hello Retaliator,
      Will the reg code below disable WindowsUpdate? Do I have to change anything?

      Thanks
      Certifiedgeek05

      Originally posted by Retaliator View Post
      I push automatic updates from a WSUS server, and i use GPO to specify the server name, and options.

      have a look at this :

      http://technet2.microsoft.com/window....mspx?mfr=true

      about a reg file u can use to force the change manually:

      [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate]
      "ElevateNonAdmins"=dword:00000000
      "WUServer"="http://WSUSNAME.DOMAIN.NAME:8530"
      "WUStatusServer"="http://WSUSNAME.DOMAIN.NAME:8530"
      "TargetGroupEnabled"=dword:00000001
      "TargetGroup"="IsrBeeper"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU]
      "AutoInstallMinorUpdates"=dword:00000001
      "NoAutoUpdate"=dword:00000000
      "AUOptions"=dword:00000004
      "ScheduledInstallDay"=dword:00000000
      "ScheduledInstallTime"=dword:00000003
      "NoAutoRebootWithLoggedOnUsers"=dword:00000001
      "UseWUServer"=dword:00000001
      "RescheduleWaitTimeEnabled"=dword:00000001
      "RescheduleWaitTime"=dword:00000005
      "DetectionFrequencyEnabled"=dword:00000001
      "DetectionFrequency"=dword:00000022
      "RebootWarningTimeoutEnabled"=dword:00000001
      "RebootWarningTimeout"=dword:00000005
      "RebootRelaunchTimeoutEnabled"=dword:00000001
      "RebootRelaunchTimeout"=dword:00000005

      Retaliator.

      Comment


      • #4
        Re: Automatic updates settings created by GPO, Quickest way to remove?

        Hi man,

        this reg is what i use at work if i want to manually configure automatic updates per machine, workstation or server, i mainly use GPO but have that as well,
        Servers i don't apply the settings by GPO only by REG keys (with diffrent options, reboot values etc).
        this reg is not currently to DISABLE automatic updates.

        to DISABLE automatic updates, why not just disable the service ? or better - use GPO?

        to disable the service manually if it's 1 or 2 machines :

        Start->Run->services.msc and disable Automatic Updates.

        Also take a look at that,
        http://www.microsoft.com/technet/pro.../17_2kupd.mspx

        http://www.jsifaq.com/SF/Tips/Tip.aspx?id=5587

        http://www.microsoft.com/technet/pro.../17_2kupd.mspx

        I recommend to just use GPO, put the workstations on a new OU called DisableAutomaticUpdates for example, and configure the option like that (from the article below):

        Automatic Updates: Configuration tool Setting Result
        Control Panel (Automatic Updates tool)
        On the Automatic Updates dialog box, clear Keep my computer up to date.
        Disables Automatic Updates.

        Group Policy
        Disable the Configure Automatic Updates policy setting in the Wuau.adm Group Policy template. For more information, see "Procedures for Disabling Windows Update and Automatic Updates," later in this section.
        Disables Automatic Updates

        Please let us know,
        Thanks,

        Retaliator.
        Thanks & Regards

        Retaliator

        MCSA/MCSE/CCNA
        Computer Science Graduate

        Comment

        Working...
        X