Block Windows 7 Service Pack 1 via Windows Update

Windows 7 and Windows Server 2008 R2 would soon receive Service Pack 1 via Windows Update. A blocking tool is available from Microsoft, for organizations that would like to temporarily prevent installation of Service Pack updates through Windows Update.

This tool would be valid for 12 months following general availability of the service pack. Obviously, this toolkit will not prevent the installation of the service pack from CD/DVD, or from the stand-alone download package.

This toolkit contains three components. You’d only need  the component which best serves your organization’s IT infrastructure.

  • A Microsoft-signed executable
      The executable creates a registry key on the computer on which it is run that blocks or unblocks (depending on the command-line option used) the delivery of a Service Pack to that computer through Windows Update. The key used is HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate.
  • A script
      The script does the same thing as the executable, but allows you to specify the remote machine name on which to block or unblock delivery of Service Packs.
  • An ADM template
    • The ADM template allows administrators to import group policy settings to block or unblock delivery of Service Packs into their Group Policy environment. Administrators can then use Group Policy to centrally execute the action across systems in their environment.

Download Page.

Posted by on , in Category Windows with Tags
Abhishek Baxi writes on the Windows ecosystem and hosts an online show - Microsoft Talk ( and owns the Windows Phone portal - I Love Windows Phone ( He lives at and talks incessantly on Twitter.