How to disable the “Check online for updates from Microsoft Update” link in the Windows Update icon in Control Panel
So you have ConfigMgr in place or WSUS in your environment. You go through the list of patches released by Microsoft before approving it and deploying it out to your organization. However, there is still a way for your users to check for updates through the control panel. This will mean even unapproved patches can be installed by your users if they really want to. I’m sure you’ll be asking how do I disallow this.
This can be simply done through Group Policy…thank God. 🙂
Go to your Group Policy management console and navigate to Administrative Templates | System | Internet Communication Management | Internet Communication Settings
Set the “Turn off access to all Windows Update features” to Enabled.
If this policy setting is enabled, all Windows Update features are removed. It blocks access to the Microsoft Update and Windows Update Web sites. The machine will not get automatic updates directly from Windows Update or Microsoft Update, but it can still get updates from a WSUS server.
This might be useful for administrators to implement in their environment. Hope that helped.