Windows 10 Query - GPOs to only allow updates from SCCM and not Microsoft online

  • Thread starter Thread starter AusA380
  • Start date Start date
A

AusA380

Guest
Hi,

I'm running Windows 10 from versions 1709 - 1809 in my organization. I use SCCM and WSUS for updates. My plan is to stop all computers from being able to reach out to Microsoft for updates (as well as stopping users from being able to manually check in the settings menu). I also need the store to continue working for users. Can anyone advise which GPOs I need to set? I've been reading a lot of pages on this and am quite confused - basically I just want users and computers to not be able to go to Microsoft for updates and have SCCM as the only source of updates, as well as having the store still work.


I'm looking at these policies:

'Configure Automatic Updates' - set to Disabled

'Do not connect to any Windows update internet locations' - set to Disabled

'Turn off access to all Windows Update features' - set to Enabled


Any information will help, thanks.

More...
 
Back
Top