Recommended Windows Update Configuration for Patch Management

 

When Windows Automatic Update is configured to check for updates, even if it is not configured to download or install them, it can cause slow deployments with AVG Business Patch Management available in the Cloud Console.

Disabling Automatic Updates via GPO

To disable automatic Windows updates via GPO:

1. Click Start, then Run
2. Type gpedit.msc, then click OK
3. Expand Computer Configuration > Administrative Templates > Windows Components > Windows Update
4. Select Configure Automatic Updates, then choose Disabled and click OK
5. As GPO updates every 90 minutes, you can force this update to take effect by running the gpudate /force command

Setting Windows Update Service to Manual

To set the Windows update service to manual on the local client:

1. From the local machine, open services.msc
2. Find the Windows Update service, right-click and go to Properties
   • Stop the service before making any changes
3. Set the Startup type to Manual and then click Apply/Ok to save the change

To set the Windows update service to manual via GPO:

1. Go to Computer Configuration > Policies > Windows Settings > Security Settings > System Services
2. Find Windows Updates in the list, double-click to enter the configuration window
3. Check Define this policy setting then select Manual
4. Click Apply/OK to save

Removing Specific Intranet Microsoft Update Service Location

To remove specific intranet Microsoft update service location via GPO:

1. From GPO, go to Computer Configuration > Administrative Templates > Windows Components > Windows Update
2. Find the Specify intranet Microsoft update service location option and make sure it is set to Not Configured