Configure Windows Updates using Registry in Windows Server

When you are on a network, you would want total control of other Windows computers on the network and hence would want to configure Windows Updates in a way that only you can access the settings. People may turn off or delay Windows Updates that might be against your wish. If you are the administrator, this article can help you configure Windows Server systems without using the Group Policy editor –  rather by configuring it using the Windows Registry editor.

windows-8-logo-orb

How to configure Windows Update on Windows Server

The main keys pertaining to Windows Update on Server 2003 and 2008 R2 are as follows:

  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • HKEY_LOCAL_MACHINE\SYSTEM\Internet Communication Management\Internet Communication
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

You have to use the keys within these paths to configure Windows Updates in a manner you want so that users may or may not have access to Windows Updates. In most cases, you would want sole control and will want to remove user access to Windows Updates. The following are few examples of how to configure Windows update on server.

Under the following key, you can find DisableWindowsUpdateAccess entry that deals with whether or not to provide users with access to Windows Updates in control panel:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate

A value of 1 will disable the access or if you wish users to access the Windows update feature, use 0. If you are using 0, you might want to elevate users so that they can install updates on the machine. In that case, you have to change the value of ElevateNonAdmins to 1.

Disable Windows Update links on Internet Explorer in Windows Server

Using the same registry method, you can disable Internet Explorer from opening Windows Update feature. Move to the following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Here, look for NoWindowsUpdate Dword.

To disable access to Windows Updates for people on Internet Explorer, change the value of the DWORD to 1. This will prevent users from accessing even the Windows Update website.

Disable Windows Server Update Services Internet Communications Access

You can use the registry editor to manage WSUS as well. For disabling the access to Windows Update on Windows Server systems, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\Internet Communication Management\Internet Communication

Here, look for DisableWindowsUpdateAccess DWORD. Set the value to 1 to disable access to Windows Update. This will turn off all access to the Windows Update features on the user machines. Even the site of Windows Update is blocked so browsers, including Internet Explorer, cannot use it to update the individual computers until you want to.

Making mistakes while dealing with Windows Registry can cause system failure. Please back up the Registry before making changes to the system.

For more information on using the Registry Editor to configure Windows Update on Windows Server, check out this Technet page.

Download this VPN to secure all your Windows devices and browse anonymously
Posted by on , in Category Windows with Tags
Arun Kumar is a Microsoft MVP alumnus, obsessed with technology, especially the Internet. He deals with the multimedia content needs of training and corporate houses. Follow him on Twitter @PowercutIN

8 Comments

  1. Carroll MacDonald

    Today while making changes on computers, I had 2 laptops and a desktop with folders open, while making a change to the View (All Files and Folders), I noticed that the two laptops made the same changes, so I did the same thing from one of the laptops… removing the check mark from View All Files and Folders… it removed the check mark from the other two computers. I did this a few times to be sure if I was seeing this right…. yup it was. I was logged in as the same user on each windows 10 computer, with Sync On. Very neat feature.

  2. PhotM

    Hi Again Arun,

    The nice thing about most of MS Doc on Servers, is there is often something for Clients as well, you just have to look for it. Of course this is because Admins, etc, use clients too. This MS Doc is no different but it is not as clearly marked as it could be.

    Registry Key for clients is:

    HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateAU

    Crysta

  3. Stephen

    Hi Arun, there is a way to manage the updates like in windows 7/8.1? for example choose which updates to install or hide some of them?

  4. Arun Kumar

    Thank you for the info. I will check this.

  5. Stephen

    your article speak about Windows 10, my question refers (in tacit) how to manage Windows Updates on Windows 10…

    technet link totally useless because for old Windows edition

  6. Arun Kumar

    There has been some confusion. I thought you were asking about Windows server. Anyway, coming to Windows 10, there is no way to manage or hide updates in Windows Home and Pro.
    The enterprise edition might give you option to delay upgrades but then too, the patches and updates will have to be applied – sooner or later. MS has made sure that they don’t give the users a hand in selecting what is useful to them and what not.

  7. Fred Boulton

    In my Windows 7 Registry at HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateSystem there are no entries, only the Default entry. There are no servers or other entries.

    Please assist.

Leave a Reply

Your email address will not be published. Required fields are marked *


3 + 7 =