Automatic updates settings created by GPO, Quickest way to remove?

Home Forums Server Operating Systems Windows Server 2000 / 2003 / 2003 R2 Automatic updates settings created by GPO, Quickest way to remove?

This topic contains 3 replies, has 2 voices, and was last updated by Avatar certifiedgeek05 12 years, 6 months ago.

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #124986

    Hello,
    It has been a while since I have posted, I just landed a dream job working with a company called Infocrossing. I thank everyone who has helped me in the past with the certifcation stuff.

    I have a new question, a policy was set to push automatic updates, then a reboot time. I know undoing that has to be with a reg edit. Can someone point me in the right direction?

    Thanks
    Certifiedgeek05

    Avatar
    Retaliator
    Member
    #281466

    Re: Automatic updates settings created by GPO, Quickest way to remove?

    I push automatic updates from a WSUS server, and i use GPO to specify the server name, and options.

    have a look at this :

    http://technet2.microsoft.com/windowsserver/en/library/4ac8d574-f48e-4d9d-86c9-9aeb0f57e7501033.mspx?mfr=true

    about a reg file u can use to force the change manually:

    [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdate]
    “ElevateNonAdmins”=dword:00000000
    “WUServer”=”http://WSUSNAME.DOMAIN.NAME:8530”
    “WUStatusServer”=”http://WSUSNAME.DOMAIN.NAME:8530”
    “TargetGroupEnabled”=dword:00000001
    “TargetGroup”=”IsrBeeper”

    [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU]
    “AutoInstallMinorUpdates”=dword:00000001
    “NoAutoUpdate”=dword:00000000
    “AUOptions”=dword:00000004
    “ScheduledInstallDay”=dword:00000000
    “ScheduledInstallTime”=dword:00000003
    “NoAutoRebootWithLoggedOnUsers”=dword:00000001
    “UseWUServer”=dword:00000001
    “RescheduleWaitTimeEnabled”=dword:00000001
    “RescheduleWaitTime”=dword:00000005
    “DetectionFrequencyEnabled”=dword:00000001
    “DetectionFrequency”=dword:00000022
    “RebootWarningTimeoutEnabled”=dword:00000001
    “RebootWarningTimeout”=dword:00000005
    “RebootRelaunchTimeoutEnabled”=dword:00000001
    “RebootRelaunchTimeout”=dword:00000005

    Retaliator.

    #296815

    Re: Automatic updates settings created by GPO, Quickest way to remove?

    Hello Retaliator,
    Will the reg code below disable WindowsUpdate? Do I have to change anything?

    Thanks
    Certifiedgeek05

    Retaliator;69659 wrote:
    I push automatic updates from a WSUS server, and i use GPO to specify the server name, and options.

    have a look at this :

    http://technet2.microsoft.com/windowsserver/en/library/4ac8d574-f48e-4d9d-86c9-9aeb0f57e7501033.mspx?mfr=true

    about a reg file u can use to force the change manually:

    [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdate]
    “ElevateNonAdmins”=dword:00000000
    “WUServer”=”http://WSUSNAME.DOMAIN.NAME:8530”
    “WUStatusServer”=”http://WSUSNAME.DOMAIN.NAME:8530”
    “TargetGroupEnabled”=dword:00000001
    “TargetGroup”=”IsrBeeper”

    [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU]
    “AutoInstallMinorUpdates”=dword:00000001
    “NoAutoUpdate”=dword:00000000
    “AUOptions”=dword:00000004
    “ScheduledInstallDay”=dword:00000000
    “ScheduledInstallTime”=dword:00000003
    “NoAutoRebootWithLoggedOnUsers”=dword:00000001
    “UseWUServer”=dword:00000001
    “RescheduleWaitTimeEnabled”=dword:00000001
    “RescheduleWaitTime”=dword:00000005
    “DetectionFrequencyEnabled”=dword:00000001
    “DetectionFrequency”=dword:00000022
    “RebootWarningTimeoutEnabled”=dword:00000001
    “RebootWarningTimeout”=dword:00000005
    “RebootRelaunchTimeoutEnabled”=dword:00000001
    “RebootRelaunchTimeout”=dword:00000005

    Retaliator.

    Avatar
    Retaliator
    Member
    #281471

    Re: Automatic updates settings created by GPO, Quickest way to remove?

    Hi man,

    this reg is what i use at work if i want to manually configure automatic updates per machine, workstation or server, i mainly use GPO but have that as well,
    Servers i don’t apply the settings by GPO only by REG keys (with diffrent options, reboot values etc).
    this reg is not currently to DISABLE automatic updates.

    to DISABLE automatic updates, why not just disable the service ? or better – use GPO?

    to disable the service manually if it’s 1 or 2 machines :

    Start->Run->services.msc and disable Automatic Updates.

    Also take a look at that,
    http://www.microsoft.com/technet/prodtechnol/windows2000pro/maintain/w2kmngd/17_2kupd.mspx

    http://www.jsifaq.com/SF/Tips/Tip.aspx?id=5587

    http://www.microsoft.com/technet/prodtechnol/windows2000pro/maintain/w2kmngd/17_2kupd.mspx

    I recommend to just use GPO, put the workstations on a new OU called DisableAutomaticUpdates for example, and configure the option like that (from the article below):

    Automatic Updates: Configuration tool Setting Result
    Control Panel (Automatic Updates tool)
    On the Automatic Updates dialog box, clear Keep my computer up to date.
    Disables Automatic Updates.

    Group Policy
    Disable the Configure Automatic Updates policy setting in the Wuau.adm Group Policy template. For more information, see “Procedures for Disabling Windows Update and Automatic Updates,” later in this section.
    Disables Automatic Updates

    Please let us know,
    Thanks,

    Retaliator.

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.