[Last Call] Learn how to a build a cloud-first strategyRegister Now


disable automatic update through group policy

Posted on 2008-11-10
Medium Priority
Last Modified: 2012-05-05
hi, i m using windows server 2003 r2 environment in my domain .i have one wsus 3.0 server to update my systems. now i want  disable automatic update feature from all my server .my main aim is to update all xp client machine from wsus . and disble automatic update  for all server s.

please tell me how it is possible throiugh group policy . because  i did automatic update seetting for all machine but not able  to did disabl atomaitic update for my all servers  
Question by:RavinderPanchal

Accepted Solution

aherps earned 600 total points
ID: 22920187
Is this what you're looking for?


Assisted Solution

sunwise earned 800 total points
ID: 22920203
Hi, are you looking to disable windows update on the clients or the server. If its the clients you can disable this by loading up the group policy. Then select Computer Configuration, then Administrative Templates, Windows Update. Then from there make sure configure automatic updates is disabled.
You can put your servers into an OU and then apply the above policy to that OU which should then disable the windows update.
I hope that makes sense if you want more info let me know.

Author Comment

ID: 22920208
thanks for solution.yes this partially right but how can i save my server because i do not want them to be update by wsus .is there any more poliy so i can applied on them .mean disable automatic update feature

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.


Author Comment

ID: 22920232
i have configured automatic update for xp on default domain policy and disable it on another policy on server .which one is preffered by system

Assisted Solution

sunwise earned 800 total points
ID: 22920241
Are meaning you have applied 2 policys?? If so its always the most restrictive policy that gets selected.

Author Comment

ID: 22920275
i deployed disable automatic update on second one ..can it be applied or overtake bu default domain policy.
LVL 18

Assisted Solution

by:Andrej Pirman
Andrej Pirman earned 600 total points
ID: 22920276

if you already setup corectly WSUS update for clients, you probably created some Group Policy object named "WSUS something" and applied it to the ROOT of your domain. This means, this Group Policy is valid for all your SERVERS and CLIENT computers.

What you need to do is to move LINK to this "WSUS something" policy in Group Policy Management console to OU object, where only your Client computers are, so it will be valid only for CLIENT computers.

Then create new Group policy named, for example "WSUS for Servers" and define only one setting:
Computer Configuration -> Administrative Templates -> Windows components/Windows Update -> Configure Automatic Updates -> Configure automatic Updating: Set it to: "3 - Auto download and notify for install"

Then apply this Group Policy link to your "Domain Controllers" OU or to "Servers" OU or to both.

So it will look like this:  
Group Policy Management
 - Forest: domain.local
   - Domains
     - domain.local
       - Default Domain Policy
       - Default Domain Controllers Policy
       + Computers
         - WSUS something
       + Servers
         - WSUS for servers
       + Domain Controllers
         - WSUS for servers

Open in new window


Author Comment

ID: 22920836
i deployed two policy one as default domain policy where i enabled automatic update . and other one where i disable automatic update on server but when run the gpupdate after that i found that domain policy is appliying over all the server as wall clients

Author Closing Comment

ID: 31514959
thnaks for Kind support. Now i disbale the automatic update after reding those articles. All articles are up to mark.

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question