'Specify settings for optional component installation and component repair'ĭownload repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS) = Enabledīut it seems the top Policy blocks this from working. With 1903 this policy seems to also block the Settings > Apps > Optional features > Add a Feature functionality, which we'd like to enable and let it grab them from Microsoft.Ĭomputer Configuration/Policies/Administrative Templates/System 'Turn off access to all Windows Update features' = Enabled I prefer to install drivers from the vendor who have tested the drivers with our computer models. Plus I have found inconsistencies when updating drivers via the Device Manager. I have the best results this way and it prevents user's or local techs from accidentally upgrading machines when they decide to click on Check online for updates from Microsoft Update. It doesn't but I always recommend going to the vendor's siteįor drivers or preinstalling a vendor's driver update tool (Lenovo's System Update, Turn off access to all Windows Update features = Enabledĭo you know if that policy allows Device Manager to check online for drivers when a peripheral is plugged into one of the USB ports (USB dock, headset, fingerprint sensor etc.)? We use the following GPO to remove the Check online for updates from Microsoft Update option and it still give us the ability to use the Microsoft Store:Ĭomputer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings Check for Updates but Let Me Choose whether to Download and Install Them.

We also want Windows Update to be available to the device manager so that if a new peripheral is installed, drivers can automatically be downloaded and updated from Microsoft Update. Windows Update is Microsofts online portal for providing software fixes and. Which setting just blocks checking for internet-based updates through the settings menu, but doesn't disable anything else? The other GPO completely grays out checking for updates which also prevents the users from manually checking for updates against our WSUS server. One of the GPOs says enabling it will disable the Windows Store.

I saw a few different GPOs that can block update checking, but they do more than just block checking online and end up breaking other things.

So, this means systems with Windmay get 1903 pushed to the workstation in a few weeks if a user checks for updates online. We do have a GPO to defer feature updates, but the maximum deferral is 365 days despite feature updates being supported for 18 to 30 months. We want this disabled so that users do not inadvertently download unapproved feature updates. How can we disable the link in Settings menu that let's users download updates from Microsoft? This works perfectly, however if our W10 users go to Update section of Settings they see an option Check online for updates from Microsoft Update which.

Windows 10 check online for updates