Windows 7 and Windows Server 2008 R2 would soon receive Service Pack 1 via Windows Update. A blocking tool is available from Microsoft, for organizations that would like to temporarily prevent installation of Service Pack updates through Windows Update.
This tool would be valid for 12 months following general availability of the service pack. Obviously, this toolkit will not prevent the installation of the service pack from CD/DVD, or from the stand-alone download package.
This toolkit contains three components. You’d only need the component which best serves your organization’s IT infrastructure.
- A Microsoft-signed executable
- The executable creates a registry key on the computer on which it is run that blocks or unblocks (depending on the command-line option used) the delivery of a Service Pack to that computer through Windows Update. The key used is HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate.
- A script
- The script does the same thing as the executable, but allows you to specify the remote machine name on which to block or unblock delivery of Service Packs.
- An ADM template
- The ADM template allows administrators to import group policy settings to block or unblock delivery of Service Packs into their Group Policy environment. Administrators can then use Group Policy to centrally execute the action across systems in their environment.