ZDNet: Microsoft removes manual deferrals from Windows Update by IT pros to prevent confusion

The UI for this has been half busted for quite some time. GPO, or the registry entries created by GPO to configure Windows Update is the only reliable means to handle this. inTune work too of course.

Here is the full registry file that results from my complete GPO setup I use:

Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DeferFeatureUpdates"=dword:00000001
"BranchReadinessLevel"=dword:00000020
"DeferFeatureUpdatesPeriodInDays"=dword:000000b4
"PauseFeatureUpdatesStartTime"=""
"ElevateNonAdmins"=dword:00000000
"AcceptTrustedPublisherCerts"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"IncludeRecommendedUpdates"=dword:00000000
"AUPowerManagement"=dword:00000001
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"NoAUShutdownOption"=dword:00000000
"AutoInstallMinorUpdates"=dword:00000001
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000016
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000003c
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"UseWUServer"=dword:00000000
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000002
"ScheduledInstallTime"=dword:00000002
"ScheduledInstallEveryWeek"=dword:00000001
"AllowMUUpdateService"=dword:00000001
"NoAUAsDefaultShutdownOption"=dword:00000000
"EnableFeaturedSoftware"=dword:00000000
"RebootWarningTimeoutEnabled"=dword:00000000
"AutomaticMaintenanceEnabled"=dword:00000001
"AlwaysAutoRebootAtScheduledTime"=dword:00000000

Anyway, MS has back pedaled on this before, and I suspect they'll do so again.
 
Back
Top