Link to home
Start Free TrialLog in
Avatar of kpdonahue
kpdonahueFlag for United States of America

asked on

Windows Automatic Updates with Surf Control Web Filter

Hello,

Can anybody tell me if there is a way to block Windows Automatic Updates with Surf Control Web Filter or via a firewall?

I am able to block the windows update URL with SC; so if someone actually tries to hit the site via a web browser they will get blocked.  However if the users PC has the automatic updates configured to “download updates and inform me; but let me choose when to install them” it will not get blocked.

Any assistance on this will be appreciated.

Thank you.
Avatar of mikeleebrla
mikeleebrla
Flag of United States of America image

why not just create a GPO that turns off automatic updates and push that GPO to the PCs that you don't want to get updates?
Avatar of kpdonahue

ASKER

I can do that on most of my domains; however I still have a few NT domains left (the larger ones).
Avatar of McKnife
So you are administering 2k or higher workstations in that nt domains? (I wonder, because NT does not have automatic update services).
I would distribute registry entries via a startup script. These entries have the same effect as a policy denying updates.
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/92848.mspx?mfr=true
The second entry (NoAutoUpdate) is against the usage of the service (you could as well set that service to deactivated):
http://support.microsoft.com/kb/328010

Only local administrators could change these registry entries.
ASKER CERTIFIED SOLUTION
Avatar of orangutang
orangutang

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial