How to Control user access to Windows Update with Windows Server 2003 Group Policy

You can remove access to the Windows Update features in separate steps - one which prevents updates using Windows Update, another which removes links to Windows Update items, and another which disables or configures automatic updates. Using the Group Policy configurations discussed here will disable Automatic Updates for the users or computers to which the modified Group Policy objects apply. Keep this in mind when configuring these items.

To prevent Windows Update from updating the operating system, complete the following steps:

1. Open the Group Policy Editor.
2. Create a new Group Policy object, for example, NoUpdates.
3. Select the User configuration.
4. Click Administrative Templates.
5. Click System.
6. Click Internet Communication Management.
7. Select Internet Communication Settings.
8. In the right pane of the Group Policy Editor, double-click Turn Off Access To All Windows Update Features, select the Enabled radio button, and click OK.

To disable access to Windows Update commands, such as links in the Start menu or Internet Explorer, complete the following steps:

1. Click User Configuration.
2. Click Administrative Templates.
3. Click the Start Menu and Task Bar.
4. In the right pane of the Group Policy Editor, double-click Remove Links And Access To Windows Update.
5. Set the policy to Enabled and click OK.

To prevent the use of Windows Update entirely, complete the following steps:

1. Open the Group Policy Editor.
2. Select Computer Configuration.
3. Click Administrative Templates.
4. Click Windows Components.
5. Click Windows Update.
6. Double-click Configure Automatic Updates.
7. Select the Disabled radio button and click OK.