looking to add a script that will disable windows update. I also would like it to disable Microsoft account and OOBE in local group policy. not sure what version im on for Kace.
Im trying to setup systems that once it checks in to kace it will disable windows update service. Also i need to disable OOBE and microsoft account in local computer policy.
**also does kace offer anything for running in kiosk mode? full screen web page.
-
What have you tried? - mtatro 3 years ago
Answers (2)
Go to Scripting | Configuration Policies | Windows Update Policy to setup the policy.
It is implemented since many years like that.
You also should review the other policies since they are really good for many use cases.
If you created the script via the policy you can enable and add the right systems and labels
I could have sworn I had already commented or answered this post, Nico is right there is a wizard that will help you build a script to disable windows updates and in worked fine, back in 2017!!!
HOWEVER, Microsoft has just become more and more sneaky about this, such that early versions of Windows 10 started to turn the functionality back on, without informing you. So having a “run once” script approach became useless. After the 2nd or 3rd Windows 10 release it even became futile running the script regularly as without fail, Microsoft would turn it back on.
We even destroyed the update service in using a script, that worked, but we didn’t feel it was right to have to do that.
In the end we established that the only effective way to prevent Windows update services from running, was to use the KACE script that deploys a local WSUS Werner address, so update services look to that location rather than the internet for updates. Of course we recommend deploying a dummy address that doesn’t work, so windows update services are happy(for now) and we can control everything using the SMA.
