Sign in with
Sign up | Sign in
Your question

Blocking windows update?

Last response: in Windows 2000/NT
Share
Anonymous
December 8, 2004 8:28:03 PM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

Question. If i enable the user policy to block access to the Windows Update
features; will that stop SUS from getting updates to the computers? I know
it says it blocks windows updates and automatic updates but what about sus?
Does anybody know? I also have a WUS server and when i run a detect now on
a computer the windows update.log file shows the following error
"WindowsUpdate is disabled because the registry
valueDisableWindowsUpdateAccess is set to 1" so this seems like it does
block wus but im not sure about sus. Please help!

Phil
Anonymous
December 9, 2004 4:36:09 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

Blocking Windows Update Features only prevents the user from going to
windows update (via links in IE, etc), but it does not interfere with the
functionality of Automatic Updates which SUS. I am not sure if WUS acts
differently.

--
Steve Seguis - MCSE, MS-MVP, SCJP
SCRIPTMATION
Automating the Enterprise
http://www.scriptmation.com


"Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
> Question. If i enable the user policy to block access to the Windows
> Update features; will that stop SUS from getting updates to the computers?
> I know it says it blocks windows updates and automatic updates but what
> about sus? Does anybody know? I also have a WUS server and when i run a
> detect now on a computer the windows update.log file shows the following
> error "WindowsUpdate is disabled because the registry
> valueDisableWindowsUpdateAccess is set to 1" so this seems like it does
> block wus but im not sure about sus. Please help!
>
> Phil
>
Anonymous
December 9, 2004 4:36:10 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

Here is the description from the group policy template...

_____________________________________________________________
This setting allows you to remove access to Windows Update.

If you enable this setting, all Windows Update features are removed. This
includes blocking access to the Windows Update Web site at
http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the
Start menu, and also on the Tools menu in Internet Explorer. Windows
automatic updating is also disabled; you will neither be notified about nor
will you receive critical updates from Windows Update. This setting also
prevents Device Manager from automatically installing driver updates from
the Windows Update Web site.
------------------------------------------------------------------------------------

it sure sounds to me like it block automatic updates.

Phil

"Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
news:D _Ntd.67940$Vk6.54009@twister.nyc.rr.com...
> Blocking Windows Update Features only prevents the user from going to
> windows update (via links in IE, etc), but it does not interfere with the
> functionality of Automatic Updates which SUS. I am not sure if WUS acts
> differently.
>
> --
> Steve Seguis - MCSE, MS-MVP, SCJP
> SCRIPTMATION
> Automating the Enterprise
> http://www.scriptmation.com
>
>
> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
> news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
>> Question. If i enable the user policy to block access to the Windows
>> Update features; will that stop SUS from getting updates to the
>> computers? I know it says it blocks windows updates and automatic updates
>> but what about sus? Does anybody know? I also have a WUS server and when
>> i run a detect now on a computer the windows update.log file shows the
>> following error "WindowsUpdate is disabled because the registry
>> valueDisableWindowsUpdateAccess is set to 1" so this seems like it does
>> block wus but im not sure about sus. Please help!
>>
>> Phil
>>
>
>
Related resources
Anonymous
December 9, 2004 5:33:41 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

The description is a little misleading because it doesn't block automatic
updates. The reason why I know for sure is that one of my clients had this
policy enabled but had automatic updates enabled from Microsoft and all
their Windows XP clients inadvertently downloaded and installed XP Service
Pack 2. They are now using SUS (with this policy still enabled) and patching
is now in a controlled state.

--
Steve Seguis - MCSE, MS-MVP, SCJP
SCRIPTMATION
Automating the Enterprise
http://www.scriptmation.com


"Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
news:eHoUjBZ3EHA.3756@TK2MSFTNGP14.phx.gbl...
> Here is the description from the group policy template...
>
> _____________________________________________________________
> This setting allows you to remove access to Windows Update.
>
> If you enable this setting, all Windows Update features are removed. This
> includes blocking access to the Windows Update Web site at
> http://windowsupdate.microsoft.com, from the Windows Update hyperlink on
> the Start menu, and also on the Tools menu in Internet Explorer. Windows
> automatic updating is also disabled; you will neither be notified about
> nor will you receive critical updates from Windows Update. This setting
> also prevents Device Manager from automatically installing driver updates
> from the Windows Update Web site.
> ------------------------------------------------------------------------------------
>
> it sure sounds to me like it block automatic updates.
>
> Phil
>
> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
> news:D _Ntd.67940$Vk6.54009@twister.nyc.rr.com...
>> Blocking Windows Update Features only prevents the user from going to
>> windows update (via links in IE, etc), but it does not interfere with the
>> functionality of Automatic Updates which SUS. I am not sure if WUS acts
>> differently.
>>
>> --
>> Steve Seguis - MCSE, MS-MVP, SCJP
>> SCRIPTMATION
>> Automating the Enterprise
>> http://www.scriptmation.com
>>
>>
>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>> news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
>>> Question. If i enable the user policy to block access to the Windows
>>> Update features; will that stop SUS from getting updates to the
>>> computers? I know it says it blocks windows updates and automatic
>>> updates but what about sus? Does anybody know? I also have a WUS server
>>> and when i run a detect now on a computer the windows update.log file
>>> shows the following error "WindowsUpdate is disabled because the
>>> registry valueDisableWindowsUpdateAccess is set to 1" so this seems like
>>> it does block wus but im not sure about sus. Please help!
>>>
>>> Phil
>>>
>>
>>
>
>
Anonymous
December 9, 2004 5:33:42 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

ok, thaks for the info. I also noticed that though i have this policy set,
my windows 2000 pc's still get the policy even though it says it only
applies to Windows XP and Windows Server 2003. I just tested this on a W2k
sp4 computer, logged on as a domain account that is a member of the local
admin group and i received a message saying "access to windows update site
was denied due to policy restrictions". Sounds like microsoft needs to get
their descriptions fixed and what stuff applies to and when! ;-)

Phil

"Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
news:9QOtd.68130$Vk6.60891@twister.nyc.rr.com...
> The description is a little misleading because it doesn't block automatic
> updates. The reason why I know for sure is that one of my clients had this
> policy enabled but had automatic updates enabled from Microsoft and all
> their Windows XP clients inadvertently downloaded and installed XP Service
> Pack 2. They are now using SUS (with this policy still enabled) and
> patching is now in a controlled state.
>
> --
> Steve Seguis - MCSE, MS-MVP, SCJP
> SCRIPTMATION
> Automating the Enterprise
> http://www.scriptmation.com
>
>
> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
> news:eHoUjBZ3EHA.3756@TK2MSFTNGP14.phx.gbl...
>> Here is the description from the group policy template...
>>
>> _____________________________________________________________
>> This setting allows you to remove access to Windows Update.
>>
>> If you enable this setting, all Windows Update features are removed. This
>> includes blocking access to the Windows Update Web site at
>> http://windowsupdate.microsoft.com, from the Windows Update hyperlink on
>> the Start menu, and also on the Tools menu in Internet Explorer. Windows
>> automatic updating is also disabled; you will neither be notified about
>> nor will you receive critical updates from Windows Update. This setting
>> also prevents Device Manager from automatically installing driver updates
>> from the Windows Update Web site.
>> ------------------------------------------------------------------------------------
>>
>> it sure sounds to me like it block automatic updates.
>>
>> Phil
>>
>> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
>> news:D _Ntd.67940$Vk6.54009@twister.nyc.rr.com...
>>> Blocking Windows Update Features only prevents the user from going to
>>> windows update (via links in IE, etc), but it does not interfere with
>>> the functionality of Automatic Updates which SUS. I am not sure if WUS
>>> acts differently.
>>>
>>> --
>>> Steve Seguis - MCSE, MS-MVP, SCJP
>>> SCRIPTMATION
>>> Automating the Enterprise
>>> http://www.scriptmation.com
>>>
>>>
>>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>>> news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
>>>> Question. If i enable the user policy to block access to the Windows
>>>> Update features; will that stop SUS from getting updates to the
>>>> computers? I know it says it blocks windows updates and automatic
>>>> updates but what about sus? Does anybody know? I also have a WUS
>>>> server and when i run a detect now on a computer the windows update.log
>>>> file shows the following error "WindowsUpdate is disabled because the
>>>> registry valueDisableWindowsUpdateAccess is set to 1" so this seems
>>>> like it does block wus but im not sure about sus. Please help!
>>>>
>>>> Phil
>>>>
>>>
>>>
>>
>>
>
>
Anonymous
December 9, 2004 5:33:42 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

Steve Seguis [MVP] wrote:
> The description is a little misleading because it doesn't block
> automatic updates. The reason why I know for sure is that one of my
> clients had this policy enabled but had automatic updates enabled
> from Microsoft and all their Windows XP clients inadvertently
> downloaded and installed XP Service Pack 2. They are now using SUS
> (with this policy still enabled) and patching is now in a controlled
> state.

also helpful to use only limited user accounts, as non-admins can't run WU
anyway.
>
>
> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
> news:eHoUjBZ3EHA.3756@TK2MSFTNGP14.phx.gbl...
>> Here is the description from the group policy template...
>>
>> _____________________________________________________________
>> This setting allows you to remove access to Windows Update.
>>
>> If you enable this setting, all Windows Update features are removed.
>> This includes blocking access to the Windows Update Web site at
>> http://windowsupdate.microsoft.com, from the Windows Update
>> hyperlink on the Start menu, and also on the Tools menu in Internet
>> Explorer. Windows automatic updating is also disabled; you will
>> neither be notified about nor will you receive critical updates from
>> Windows Update. This setting also prevents Device Manager from
>> automatically installing driver updates from the Windows Update Web
>> site.
>> -------------------------------------------------------------------------
-----------
>>
>> it sure sounds to me like it block automatic updates.
>>
>> Phil
>>
>> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in
>> message news:D _Ntd.67940$Vk6.54009@twister.nyc.rr.com...
>>> Blocking Windows Update Features only prevents the user from going
>>> to windows update (via links in IE, etc), but it does not interfere
>>> with the functionality of Automatic Updates which SUS. I am not
>>> sure if WUS acts differently.
>>>
>>> --
>>> Steve Seguis - MCSE, MS-MVP, SCJP
>>> SCRIPTMATION
>>> Automating the Enterprise
>>> http://www.scriptmation.com
>>>
>>>
>>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>>> news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
>>>> Question. If i enable the user policy to block access to the
>>>> Windows Update features; will that stop SUS from getting updates
>>>> to the computers? I know it says it blocks windows updates and
>>>> automatic updates but what about sus? Does anybody know? I also
>>>> have a WUS server and when i run a detect now on a computer the
>>>> windows update.log file shows the following error "WindowsUpdate
>>>> is disabled because the registry valueDisableWindowsUpdateAccess
>>>> is set to 1" so this seems like it does block wus but im not sure
>>>> about sus. Please help!
>>>>
>>>> Phil
Anonymous
December 9, 2004 6:01:15 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

Philip Nunn wrote:

> Here is the description from the group policy template...
>
> _____________________________________________________________
> This setting allows you to remove access to Windows Update.
>
> If you enable this setting, all Windows Update features are removed. This
> includes blocking access to the Windows Update Web site at
> http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the
> Start menu, and also on the Tools menu in Internet Explorer. Windows
> automatic updating is also disabled; you will neither be notified about nor
> will you receive critical updates from Windows Update. This setting also
> prevents Device Manager from automatically installing driver updates from
> the Windows Update Web site.
> ------------------------------------------------------------------------------------
>
> it sure sounds to me like it block automatic updates.
Hi

It does not disable Automatic Updates when it is pointing to a SUS/WUS
server, but it will affect the user experience for users that are local
admins.

More here:

From: "Don Cottam [MS]" <d...@online.microsoft.com>
Subject: How to disable AU pop-ups and tray icon
Date: Mon, 17 Feb 2003 15:15:21 -0800
Newsgroups: microsoft.public.softwareupdatesvcs

found at
http://groups.google.com/groups?selm=O6knypt1CHA.1612%4...


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.m...
Anonymous
December 9, 2004 7:33:57 AM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

I think official support for this policy started with Windows 2000 service
pack 3 and Microsoft probably never got around to updating the
documentation.

--
Steve Seguis - MCSE, MS-MVP, SCJP
SCRIPTMATION
Automating the Enterprise
http://www.scriptmation.com


"Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
news:elNfv3Z3EHA.3120@TK2MSFTNGP12.phx.gbl...
> ok, thaks for the info. I also noticed that though i have this policy set,
> my windows 2000 pc's still get the policy even though it says it only
> applies to Windows XP and Windows Server 2003. I just tested this on a
> W2k sp4 computer, logged on as a domain account that is a member of the
> local admin group and i received a message saying "access to windows
> update site was denied due to policy restrictions". Sounds like microsoft
> needs to get their descriptions fixed and what stuff applies to and when!
> ;-)
>
> Phil
>
> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
> news:9QOtd.68130$Vk6.60891@twister.nyc.rr.com...
>> The description is a little misleading because it doesn't block automatic
>> updates. The reason why I know for sure is that one of my clients had
>> this policy enabled but had automatic updates enabled from Microsoft and
>> all their Windows XP clients inadvertently downloaded and installed XP
>> Service Pack 2. They are now using SUS (with this policy still enabled)
>> and patching is now in a controlled state.
>>
>> --
>> Steve Seguis - MCSE, MS-MVP, SCJP
>> SCRIPTMATION
>> Automating the Enterprise
>> http://www.scriptmation.com
>>
>>
>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>> news:eHoUjBZ3EHA.3756@TK2MSFTNGP14.phx.gbl...
>>> Here is the description from the group policy template...
>>>
>>> _____________________________________________________________
>>> This setting allows you to remove access to Windows Update.
>>>
>>> If you enable this setting, all Windows Update features are removed.
>>> This includes blocking access to the Windows Update Web site at
>>> http://windowsupdate.microsoft.com, from the Windows Update hyperlink on
>>> the Start menu, and also on the Tools menu in Internet Explorer. Windows
>>> automatic updating is also disabled; you will neither be notified about
>>> nor will you receive critical updates from Windows Update. This setting
>>> also prevents Device Manager from automatically installing driver
>>> updates from the Windows Update Web site.
>>> ------------------------------------------------------------------------------------
>>>
>>> it sure sounds to me like it block automatic updates.
>>>
>>> Phil
>>>
>>> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
>>> news:D _Ntd.67940$Vk6.54009@twister.nyc.rr.com...
>>>> Blocking Windows Update Features only prevents the user from going to
>>>> windows update (via links in IE, etc), but it does not interfere with
>>>> the functionality of Automatic Updates which SUS. I am not sure if WUS
>>>> acts differently.
>>>>
>>>> --
>>>> Steve Seguis - MCSE, MS-MVP, SCJP
>>>> SCRIPTMATION
>>>> Automating the Enterprise
>>>> http://www.scriptmation.com
>>>>
>>>>
>>>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>>>> news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
>>>>> Question. If i enable the user policy to block access to the Windows
>>>>> Update features; will that stop SUS from getting updates to the
>>>>> computers? I know it says it blocks windows updates and automatic
>>>>> updates but what about sus? Does anybody know? I also have a WUS
>>>>> server and when i run a detect now on a computer the windows
>>>>> update.log file shows the following error "WindowsUpdate is disabled
>>>>> because the registry valueDisableWindowsUpdateAccess is set to 1" so
>>>>> this seems like it does block wus but im not sure about sus. Please
>>>>> help!
>>>>>
>>>>> Phil
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
Anonymous
December 9, 2004 2:13:07 PM

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.softwareupdatesvcs (More info?)

Phil's point still holds true...<rant>it's difficult enough managing group
policy, a tool that's supposed to make centralized management easier,
without the documentation being often misleading or inaccurate. With AutoWU
and WUS at their disposal, MS has no excuse for not updating the
documentation. MS's strength at the server level is integration (including
AD [which took the market from NDS...an easier-to-use product]) and support
(vs. open source options); it needs to make sure these stay strong</rant>.

"Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
news:VAQtd.24581$ld2.10008558@twister.nyc.rr.com...
>I think official support for this policy started with Windows 2000 service
>pack 3 and Microsoft probably never got around to updating the
>documentation.
>
> --
> Steve Seguis - MCSE, MS-MVP, SCJP
> SCRIPTMATION
> Automating the Enterprise
> http://www.scriptmation.com
>
>
> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
> news:elNfv3Z3EHA.3120@TK2MSFTNGP12.phx.gbl...
>> ok, thaks for the info. I also noticed that though i have this policy
>> set, my windows 2000 pc's still get the policy even though it says it
>> only applies to Windows XP and Windows Server 2003. I just tested this
>> on a W2k sp4 computer, logged on as a domain account that is a member of
>> the local admin group and i received a message saying "access to windows
>> update site was denied due to policy restrictions". Sounds like
>> microsoft needs to get their descriptions fixed and what stuff applies to
>> and when! ;-)
>>
>> Phil
>>
>> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
>> news:9QOtd.68130$Vk6.60891@twister.nyc.rr.com...
>>> The description is a little misleading because it doesn't block
>>> automatic updates. The reason why I know for sure is that one of my
>>> clients had this policy enabled but had automatic updates enabled from
>>> Microsoft and all their Windows XP clients inadvertently downloaded and
>>> installed XP Service Pack 2. They are now using SUS (with this policy
>>> still enabled) and patching is now in a controlled state.
>>>
>>> --
>>> Steve Seguis - MCSE, MS-MVP, SCJP
>>> SCRIPTMATION
>>> Automating the Enterprise
>>> http://www.scriptmation.com
>>>
>>>
>>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>>> news:eHoUjBZ3EHA.3756@TK2MSFTNGP14.phx.gbl...
>>>> Here is the description from the group policy template...
>>>>
>>>> _____________________________________________________________
>>>> This setting allows you to remove access to Windows Update.
>>>>
>>>> If you enable this setting, all Windows Update features are removed.
>>>> This includes blocking access to the Windows Update Web site at
>>>> http://windowsupdate.microsoft.com, from the Windows Update hyperlink
>>>> on the Start menu, and also on the Tools menu in Internet Explorer.
>>>> Windows automatic updating is also disabled; you will neither be
>>>> notified about nor will you receive critical updates from Windows
>>>> Update. This setting also prevents Device Manager from automatically
>>>> installing driver updates from the Windows Update Web site.
>>>> ------------------------------------------------------------------------------------
>>>>
>>>> it sure sounds to me like it block automatic updates.
>>>>
>>>> Phil
>>>>
>>>> "Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
>>>> news:D _Ntd.67940$Vk6.54009@twister.nyc.rr.com...
>>>>> Blocking Windows Update Features only prevents the user from going to
>>>>> windows update (via links in IE, etc), but it does not interfere with
>>>>> the functionality of Automatic Updates which SUS. I am not sure if WUS
>>>>> acts differently.
>>>>>
>>>>> --
>>>>> Steve Seguis - MCSE, MS-MVP, SCJP
>>>>> SCRIPTMATION
>>>>> Automating the Enterprise
>>>>> http://www.scriptmation.com
>>>>>
>>>>>
>>>>> "Philip Nunn" <bigphil@newsgroups.nospam> wrote in message
>>>>> news:eOJVV5Y3EHA.1076@TK2MSFTNGP09.phx.gbl...
>>>>>> Question. If i enable the user policy to block access to the Windows
>>>>>> Update features; will that stop SUS from getting updates to the
>>>>>> computers? I know it says it blocks windows updates and automatic
>>>>>> updates but what about sus? Does anybody know? I also have a WUS
>>>>>> server and when i run a detect now on a computer the windows
>>>>>> update.log file shows the following error "WindowsUpdate is disabled
>>>>>> because the registry valueDisableWindowsUpdateAccess is set to 1" so
>>>>>> this seems like it does block wus but im not sure about sus. Please
>>>>>> help!
>>>>>>
>>>>>> Phil
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
!