I want to stop all users through a Group Policy from being able to install Windows Updates other than though a WSUS Server, I have configured that Windows Updates will be managed by the WSUS however they can go the the option to 'Check online for updates
from Microsoft' where they can pull down updates that we don't want them to do. I have gone in and turned off this throug a group policy "Remove access to use all Wndows Update features", and it hides the option. The only thing is as these
are remote users which only log in intermittently to do a file download/upload into the network where the WSUS server is I want them to be able to download the updates when they log onto the network as a task rather than letting the updates trickle down -
but by setting the 'remove access to all Windows Update features' there is no Window Updates option to do an update. Any ideas - we want to manage the updates they get.
↧