how to Disable windows 10 through windows 2008 R2 GPO


i have windows 2008 R2 domain controller and windows 7 as users.

i would like to find how to disable the Windows 10 icon through GPO so employees wont install it by accident

can someone give me a step to step guide of what to disable exactly ?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Scott CSenior EngineerCommented:
The Windows 10 upgrade is made available through KB3035583 – Update enables additional capabilities for Windows Update notifications in Windows 8.1 and Windows 7 SP1.  Remove and block this KB and the icon will not show up.

Windows 10 upgrade should not be going to domain joined workstations.

Also, unless your users are admins, they won't be able to run the install.

You shouldn't have to do anything.
Mr TorturSystem EngineerCommented:
and there was a discussion on this some time ago :
Scott CSenior EngineerCommented:
I remember that discussion.  I about fell out of my chair when it was told that the users were admins.  When you do that, you get what you get.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

Users can't upgrade by accident, they'd have to be admins, and users aren't admins on a domain, unless you have setup the system badly.

Besides that only domain attached PC's get updates via wsus, and domain attached PC's aren't qualified to the free upgrade, so the banner doesn't even show up for them. So even if a user had admin rights he wouldn't get the banner to click on "accidentally".
TufinAuthor Commented:
i have the icon and alot of other users too

most of the users are local admin...

is it possible to block the application from running from GPO point of view?
Gerwin Jansen, EE MVETopic Advisor Commented:
What Windows 7 version do you have?

The W7 Enterprise version should not get the upgrade offer:

Can Enterprise customers get the free Windows 10 upgrade?

Enterprise customers with active Software [
Assurance subscription in volume licensing have the benefit to upgrade to Windows 10 enterprise offerings outside of this offer.
TufinAuthor Commented:
windows 7 pro
Davis McCarnOwnerCommented:
If you copy and paste the following to a Disable-GWX.reg file, you can run it as a STARTUP script which will run even if the user is not a local admin and remove the icon at the next boot:

Windows Registry Editor Version 5.00

;Created by Vishal Gupta for

Thomas GrassiSystems AdministratorCommented:
How do your users computers get updates?

If they all go out and get updates from Windows Updates over the web then you will continue to get the updates.

If you uses WSUS Server to deploy the updates then you can not approve the update to be deployed.

If you uninstall KB3035583 from the computer restart the Icon will no longer appear.

But if your computers all update individually then the update will reapply.

On the Windows 2008 Server you can add the Windows Update Services Role

Would be best if you had another Server running.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TufinAuthor Commented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.