Disable “Check online for updates from Microsoft Update” in Windows 10

windows10bannerIf you are already managing your Windows 10 systems (currently 1607 and below) with System Center Configuration Manager, then chances are you might want to prevent certain users from also being able to “Check online for updates from Microsoft Update.” before you have had a chance to fully test the latest cumulative update or feature update. Unfortunately, when users go into Settings > Update & security they will see a Check for updates button and below that, a Check online for updates from Microsoft Update link.

001-check-online-for-updates-from-microsoft-update

By clicking that link, it will bypass System Center Configuration Manager and go directly to Microsoft Update to see what the latest updates are available and start installing them once they download. One way that you can prevent this from happing is to enable the Group Policy setting: Do not connect to any Windows Update Internet locations:

002-do-not-connect-to-any-windows-update-internet-locations

If you enable this setting, you will not only disable the ability to check online for updates from Microsoft Update, but you will also disable the ability to install software from the Windows Store. Now if you have not started using the Windows Store yet, then this might not be a problem. Also, this policy is only effective if the Specify intranet Microsoft update service location policy is set (which it should be if you are using System Center Configuration Manager for Software Updates):

003-do-not-connect-to-any-windows-update-internet-locations

 

Once enabled, the Check online for updates from Microsoft Update link will disappear:

004-check-online-for-updates-from-microsoft-update

Hopefully we will see an option in the future that will allow for the ability to disable this link without disabling the ability to install apps from the Windows Store.

Originally posted on https://miketerrill.net/

15 thoughts on “Disable “Check online for updates from Microsoft Update” in Windows 10

  1. There is another setting in which will disable the ability to communicate with Windows Update, but will continue to allow the Store to work.

    “Turn Off Access To All Windows Update Features”

    Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication Settings

  2. Good information, thanks. Does this also disable the ability to install a driver from Microsoft when an unknown device is plugged into the PC?

  3. We set “Turn Off Access To All Windows Update Features” but this does not remove the link “Check online for updates from Microsoft Update”. One more setting we miss in Windows 10.

  4. This does not seem to work for me with Win10 1607 LTSB. I have Specify intranet Microsoft update service location enabled for SCCM, but when I also enable Do not connect to any Windows Update internet Locations, the Check online for updates from Microsoft Update link remains. Even after a GPUpdate force and or reboot. Have you come across any other methods for removing this link from 1607?

  5. Pingback: How to Remove “Windows 10 Creators Update is on its way” link using ConfigMgr | Mike's Tech Blog

  6. We want to create the follow settings:
    -. Updates are distributed through SCCM/WSUS
    -. The user can’t check online for Microsoft updates.
    -. Windows Store needs to work
    -. Drivers must be installed if new hardware is pluged in.

    Anyone suggestions to achieve this ?

    • Hi Henk,
      Windows 10 1703 has this option:
      Remove access to use all Windows Update features
      By enabling the Group Policy setting under Computer Configuration\Administrative Templates\Windows Components\Windows update\Remove access to use all Windows update features, administrators can disable the “Check for updates” option for users. Any background update scans, downloads and installations will continue to work as configured.
      https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings

      I have not tested it yet, but it sounds like it should work and achieve what you are trying to do.
      -Mike

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s