Disable native Windows 10 update functionality for Patch Management

Products

• Patch Management Solution
• IT Management Suite
• Client Management Suite

Issue/Introduction

The customer is using Patch Management Solution functionality to patch their Windows 10 workstations, 365 Apps for Enterprise, and other 3rd-party applications.

The customer would like to know how they should configure their workstations so that they are only getting patched from Patch Management so that they will not check for or install updates directly from Microsoft through Windows built-in update functionality.

Environment

ITMS 8.5, 8.6, 8.7

Resolution

The following information is provided as a reference only. Please reach out to Microsoft in order to get their current approved procedure on this (Microsoft keeps changing the corresponding functionality in an attempt to prevent end-users from controlling it).

Our recommendation is to change the Startup type for "Windows Update" to "Manual", not "Disabled". "Disabled" Windows Update service may result in updates failing to install using MSU files.

 

The following Microsoft resource should provide guidance on how to accomplish this:

https://learn.microsoft.com/en-us/windows/deployment/update/waas-wu-settings

It explains how to disable automatic updates using GPO and/or registry.

 

To change it "Manual" the Windows Update service in Services Manager, please follow the steps below:

 

Press the Windows key + R. Type services.msc, then hit Enter.
Search for Windows Update.
Right-click on Windows Update, then select Properties.
Under the General tab, set the Startup type to Manual.
Click Stop.
Click Apply, and then click OK.
Restart your computer.