Enjoy Sharing

How to disable the “Check online for updates from Microsoft Update” link in the Windows Update icon in Control Panel

So you have ConfigMgr in place or WSUS in your environment. You go through the list of patches released by Microsoft before approving it and deploying it out to your organization. However, there is still a way for your users to check for updates through the control panel. This will mean even unapproved patches can be installed by your users if they really want to. I’m sure you’ll be asking how do I disallow this.


This can be simply done through Group Policy…thank God. 🙂

Go to your Group Policy management console and navigate to Administrative Templates | System | Internet Communication Management | Internet Communication Settings

Set the “Turn off access to all Windows Update features” to Enabled.


If this policy setting is enabled, all Windows Update features are removed. It blocks access to the Microsoft Update and Windows Update Web sites. The machine will not get automatic updates directly from Windows Update or Microsoft Update, but it can still get updates from a WSUS server.

This might be useful for administrators to implement in their environment. Hope that helped.






8 responses

  1. faze


    March 26, 2013 at 12:14 am

  2. Supoanirun


    April 29, 2013 at 5:09 pm

  3. We’re a group of volunteers and opening a new scheme in our community. Your website provided us with valuable info to work on. You’ve done an impressive job and our entire community will
    be thankful to you.

    May 3, 2013 at 12:12 am

  4. Gabriel

    Very good, Thanks!

    June 26, 2013 at 6:26 pm

  5. Gerard

    How do you get this link back after you have removed it?
    Changing the GPO does not seem to help restore this link

    October 25, 2013 at 2:52 am

    • Have you tried changing it to “Disabled”? Changing it to “Not Configured” may just leave the setting to whatever it was set before.

      September 4, 2014 at 10:20 am

  6. Ron

    Now if only Microsoft made this policy more granular. So we could do something like prevent normal users from checking for online updates, but allow administrative users to do so…

    July 10, 2014 at 9:51 pm

  7. Mark

    Thanks – just a little thing, but huge help. I find the WSUS product pretty weak on what should be relatively easy reporting – like how about showing RED/GREEN for success in getting updates from the specified WSUS server. Anyway, appreciate the tip.

    September 11, 2014 at 12:07 am

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s