Solved

How can I prevent WSUS clients from being able to access Windows Update via the same WSUS GPO

Posted on 2013-06-12
4
488 Views
Last Modified: 2013-06-13
I'm a member of domain administrators group in a Windows 2008 R2 domain. I've configured a GPO that directs the members of an OU to get their MS OS updates from our WSUS server. The GPO appears to be working because all members of the OU appear/have reported on WSUS server as obtaining their updates from it. However, they all still have access to windows update or microsoft update via a IE. Which settings in the GPO am I missing that will prevent the WSUS clients from going to access the web (windows updates) for OS updates?
0
Comment
Question by:cheyliger
  • 2
4 Comments
 
LVL 4

Accepted Solution

by:
Rsilva98 earned 500 total points
Comment Utility
check here
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
You're looking for this setting:

Remove links and access to Windows Update

If this policy setting is enabled, Automatic Updates receives updates from the WSUS server. Users who have this policy setting enabled cannot get updates from a Windows Update Web site that you have not approved. If this policy setting is not enabled, the Windows Update icon remains on the Start menu; local administrators will be able to visit the Windows Update Web site, from which they could install unapproved software. This happens even if you have specified that Automatic Updates must get approved updates from your WSUS server. In Windows Vista, this setting will gray out the Check for updates option in the Windows Update application.
0
 

Author Comment

by:cheyliger
Comment Utility
Hi Rsilva98, thank you very much for providing that link. It was very effective in resolving the issue.
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
Yeah.....and My comment is the correct answer for those who dont want to read thru another link.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now