Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


How do I use AD Group policy to block Windows Updates from installing XP SP2?

Posted on 2004-08-12
Medium Priority
Last Modified: 2008-03-17
How do I use AD Group policy to block XP SP2?  I know that this will be pushed out by Windows Update on August 16.  We have not tested this service pack completely, and we need to block it for a while.  Microsoft indicates that we can stop SP2 by group policy, but I cannot figure out how to do it.  I know where the setting is to block Windows Updates completely, but I do not want to do that.  I just need to black SP2 for XP.
Question by:lileto
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Expert Comment

ID: 11789996
Currently, XP SP2 is only available through automatic updates.  In the future, I'm sure it will be available for network installs and such (EXE version)

For the time being, you can DISABLE Automatic Updates via Group Policy.  This will prevent any updates from occurring.

For the future, when the EXE is released, along with a procedure stating it is not allowed by your company, not having administrator access should be enough to stop the installation.

Pretty much use this link, but instead of enabling AU, choose to DISABLE it instead of Not Configured or Enabled.

OR -- if you have an internal SUS server, you can just NOT APPROVE the XP SP2 update and it won't be released.

SUS is probably the best solution but for the time being you can simply block Automatic Updates with GP if you need to.
LVL 10

Expert Comment

ID: 11790573
I think that whay you need is following article:
Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates

Expert Comment

ID: 11790736
Hi lileto,

This site has a link to download a bunch of tools to do what your after. The tool in particular that I think you want is an ADM script included in the download....

Hope this helps.
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.


Accepted Solution

ashishdaga earned 1200 total points
ID: 11791092

Temporarily Disabling Delivery of Windows XP Service Pack 2 Through Windows Update and Automatic Updates

Expert Comment

ID: 11791420
Just a minor correction to dgroscost's post:  

"Currently, XP SP2 is only available through automatic updates.  In the future, I'm sure it will be available for network installs and such (EXE version)"

It's the other way around.  I downloaded it 2 days ago.  The exe (for English) is at:

Just an FYI and sorry it's off topic of the original question.

Expert Comment

ID: 11795225
well just disable all windows updates ...... this will solfe your prblem ....

Expert Comment

ID: 11825692
If your using GPO anyway, I would consider not using the Automatic Update option on the cliens and isntall a SUS server.  It will manage all your updates for your clients and you can pick and choose which updates to push to your clients on your own.  We use it my company and it works like a charm.

But if you want to just block it temporarily, try this:

Author Comment

ID: 11830568
Disabling all of Windows Updates via group policy is not a good answer.  I would recommend that this not be done, since this would disable all critical updates that have nothing to do with SP2.  I ended up sending up the link for SP2 blocker that will block SP2 for 120 days.  We are going to be doing some extensive testing of the service pack before the update is going to be forced by Microsoft.  I may install an SUS server before then and reconfigure Automatic updates to point to that server.  Thanks for the recommendations.  As always, this site is generally clearer about the practical steps than Microsoft.

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In a recent article here at Experts Exchange (, I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Windows 7 does not have the best desktop search built in. This is something Windows 7 users have struggled with. You type something in, and your search results don’t always match what you are looking for, or it doesn’t actually work at all. There ar…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question