How can i disable MS Win10 Quality updates from installing on their own?

Jody Davis
Jody Davis used Ask the Experts™
on
Our company is under a change freeze, which includes stopping ALL windows updates on Win10 laptops until the change freeze is over. This is non-negotiable for my department. I noticed on some laptops MS Quality updates are still installing, even though we never approved them in WSUS.

I see where you can defer Quality updates for Win10 for 35 days in group policy, but we need to stop ALL updates until our change freeze time is over. As in, i need to disable this behavior for the moment.  Please don't debate the necessity of this, again, it's a company decision above my department.

How can i go about disabling these updates from occurring? There has to be a solution for this.

Help!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018

Commented:
In a supported way, you have three choices:

1) you can't disable. But you can defer/delay.  Settings are right in the settings app.

2) you can pause all updates l, again in the settings app.

3) for businesses, use uodate management software like WSUS to control and approve updates.

There is no way to just disable updates in Win10 and I've *never* seen a good reason to do so.
Distinguished Expert 2018
Commented:
"I noticed on some laptops MS Quality updates are still installing, even though we never approved them in WSUS" - the only possible reason for this behavior is that you have missed to limit machines to WSUS only. That could be done by GPO: "Do not connect to any Windows Update Internet locations" (see https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings). If that is set, only what you approve on WSUS will install. Full control.
Jody DavisSystems Engineer

Author

Commented:
Cliff, we do of course use WSUS to manage updates. And again, we're in a change freeze, which companies do sometimes, to include desktop/laptop systems and not just servers. I think we all know MS updates have caused problems in the past, so for a few months barring critical hotfixes, we stop all changes to our environment due to our business needs. This is why during a critical time for our company we freeze any and all changes.

McKnife. That can work, i appreciate it. Better than a reg hack to disable notifications. Thanks!
Distinguished Expert 2018

Commented:
I can o ly guess that the question got edited as I was posting my reply. When I wrote that reply, onky the first paragraph was in the question.  Odd.   At any rate, looks like you've gotten your answer.  Properly configured, uodstes will not install if they aren't approved in WSUS.  That's the long and short of it.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial