/build/static/layout/Breadcrumb_cap_w.png

Patching Best Practices with Windows Update Service

Hello Ninja's

I'm looking for advice from KACE and/or ITNinja's on how to keep Windows Update Service enabled on devices so my end users can install applications from the Windows Store for Business but not have updates installed from Windows Update. I only want my devices patched from KACE on my schedules and only from my internal network, no internet downloads. Currently we disable Windows Update Service via GPO but that is blocking Windows Store installs. I do not have SCCM or WSUS at the moment, but if needed I could build a WSUS if that is needed I guess. Also we only run Windows 10 Pro, not Enterprise. Thanks in advance.

Asked 4 years ago 566 views
2 Comments   [ + ] Show comments
  • too many limitations there... you are clearly in need of an enterprise solution, but running a Pro License of Win10.

    Anyway, GPO policies should suffice, and they should not prevent the store from running, unless the the GPO is targetting the Store.

    Anyway, if Windows Updates is a concern, then you should stay away from Home or Pro versions.

    And go Enterprise or Education editions. - Channeler 4 years ago
  • Channeler, If I was to go with the enterprise version of Windows 10 would you be able to provide a best practices guide for GPO settings to control window updates? - kjenne 4 years ago

Answers (0)

Be the first to answer this question

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ