For example to address your question in comments about whether the AUOption is even functioning, again looking carefully at the Help for 'Configure Automatic Updates' option in Group Policy editor it states: Windows Update will still function despite apparent lack of configuration of some of these settings in either Registry or Group Policy. However, an administrator can still configure Automatic Updates through Control Panel.Ĭonversely as you would expect, only those that are specified in either Registry or Group Policy are locked out from the Control Panel.Īs soon as you start to edit the settings via Group Policy, the registry keys are modified and/or added to (relative to the specific Group Policy settings you manipulate in GPEdit). If the status is set to Not Configured, use of Automatic Updates is not specified at the Group Policy level. This is support by the Help text for 'Configure Automatic Updates' option in Group Policy editor
As far as I can tell any settings that are not configured in the Registry or Group Policy are able to be manipulated by the user from the Control Panel interface. In the initial 'un-configured' state Group Policy will show all these settings as 'Not Configured', despite the fact there are at least two matching Registry Keys configuring parts of it as you've identified. These are set in the Registry under HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU as mentioned by The two keys you mention seem to be the default for the public Server 2019 Datacentre VM image (certainly is for the 10 or so I've deployed in Azure so far) leaving the Server OS free to download and install updates at whim out of the box. I have seen the similar question here, but it is unanswered. So where are these Windows Update policies coming from? Using gpresult /r with elevated command prompt, I can see that in both Computer Settings and User Settings, no Group Policies have been applied. I ran dsregcmd /status and saw that AzureAdJoined, EnterpriseJoined, DomainJoined are all 'No'.
Systeminfo says that DOMAIN is 'WORKGROUP'. Next, I checked if the computer was on a domain of some kind. All of these settings are set to 'Not configured'. I have opened Local Group Policy Editor and navigated to Computer Configuration > Administrative Templates > Windows Components > Windows Update. In Settings > Update and Security > Windows Update, I see the message 'Some settings are managed by your organisation.' When I click 'View configured update policies', I see that there are Policies set on my device: Automatically download updates and install them on the specified schedule This is a Windows Server 2019 created in May 2020 on Azure.
0 kommentar(er)
