Link to home
Start Free TrialLog in
Avatar of *** Hopeleonie ***
*** Hopeleonie ***Flag for Switzerland

asked on

Defer updates 14 days for unmanaged clients

Hi

I have to defer Windows updates 14 days for all unmanaged clients. How can I do this with a PowerShell script?
All clients are Windows 10 1909 Pro.

Thanks
Avatar of McKnife
McKnife
Flag of Germany image

Feature updates and quality updates can be deferred.
Security updates cannot be deferred.
All updating can be paused manually.

I have no script ready for pausing, but if these clients are unmanaged anyway, how would you apply that script?
The following registry values can be set to defer updates in HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate

DeferUpgrade = 1
DeferUpgradePeriod = 0-8 (No of months)
DeferUpdatePeriod = 0-4 (No of weeks)

To stop/pause updates use:
PauseDeferrals = 1 (pause all upgrades

See https://www.thewindowsclub.com/set-period-defer-upgrades-updates-windows-10
Avatar of *** Hopeleonie ***

ASKER

@McKnife
I have no script ready for pausing, but if these clients are unmanaged anyway, how would you apply that script?
One junior will go and run the script manually
Then he can pause the updates inside the modern control panel - does not take longer! No script needed.

Peter's script does not apply to security updates.
Hi McKnife

This time we have 43 clients. Lot of customers are asking for a solution and my boss don't like to send your stuff each time
On unmanaged clients, all users are admins. They just join to TSE's.

I can't believe that nobody is having a script. :(
Let me have a guess: you are using a home office setup in which the employees use remote desktop to reach their machines in the office? And you fear that these machines will reboot and become inaccessible because of updates?

You may set the option that windows update should not restart with users being logged on.
https://www.makeuseof.com/tag/disable-forced-restarts-windows-update/

But still: how do you think to deploy this when these machines are unmanaged?
Hi McKnife

it's not because of forced restarts but because of buggy MS patches in the last time.
TSE servers are not the problem. The problems are really the unmanaged clients (for us jump hosts).
My boss gave us an order to create a script that the users can set it alone (as all are admins).
See also my other question:
https://www.experts-exchange.com/questions/29175229/Disable-Windows-Updates-in-PowerShell.html
WHY a script, for XXX sake? :-)
You can do it with 4 clicks using the GUI.
WHY a script, for XXX sake? :-)
You can do it with 4 clicks using the GUI.
As I told because the number of clients will grow and we don't have give support for unmanaged clients ;)
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks to you both.