Does K1000 rely on "Windows Update" service for patching?
We are decommissioning WSUS for Windows patching and using the K1000 going forward. I'm trying to figure out the most sure-fire way of stopping our PCs from grabbing updates from either the WSUS server -or- directly from Microsoft. It seems like the logical thing to do is to disable the Windows Update service (wuauserv). Does KACE rely on it at all? It doesn't seem to in my testing, but I thought I'd ask the community! Also, are there any other negative impacts that anyone can think of?
Thanks!
Alicia
Thanks!
Alicia
0 Comments
[ + ] Show comments
Answers (3)
Answer Summary:
Please log in to answer
Posted by:
bkelly
10 years ago
Posted by:
jegolf
10 years ago
We used GPO to disable Windows Update from automatically checking for updates. Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Updates > set Configure Automatic Updates to Disabled. This will still allow you to use Windows Update to manually check for updates if needed (which is still useful) but updates will not automatically be snagged from your WSUS server or MS.
Comments:
-
There is also a script, built into the Configuration Policy tab, that can disable the user-interactive portion of Windows Updates.
Ron Colson
KACE Koach - ronco 10 years ago