OS Security
OS Security

Windows Automatic Updates with Surf Control Web Filter

Hello,

Can anybody tell me if there is a way to block Windows Automatic Updates with Surf Control Web Filter or via a firewall?

I am able to block the windows update URL with SC; so if someone actually tries to hit the site via a web browser they will get blocked. However if the users PC has the automatic updates configured to “download updates and inform me; but let me choose when to install them” it will not get blocked.

Any assistance on this will be appreciated.

Thank you.

kpdonahueAsked: 2006-10-27

Who is Participating?

LVL 22

orangutangCommented: 2006-10-27

Start Menu>Control Panel>Administrative Tools>Services>Right Click Automatic Updates>Properties>Change the Startup Type to Disabled.

LVL 25

mikeleebrlaCommented: 2006-10-27

why not just create a GPO that turns off automatic updates and push that GPO to the PCs that you don't want to get updates?

kpdonahueAuthor Commented: 2006-10-27

I can do that on most of my domains; however I still have a few NT domains left (the larger ones).

LVL 60

McKnifeCommented: 2006-10-27

So you are administering 2k or higher workstations in that nt domains? (I wonder, because NT does not have automatic update services).
I would distribute registry entries via a startup script. These entries have the same effect as a policy denying updates.
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/92848.mspx?mfr=true
The second entry (NoAutoUpdate) is against the usage of the service (you could as well set that service to deactivated):
http://support.microsoft.com/kb/328010

Only local administrators could change these registry entries.