Block using Internet based Windows Update for corporate machines
Block access to internet based windows update for corporate machines.
June 28, 2017
![Block using Internet based Windows Update for corporate machines Block using Internet based Windows Update for corporate machines](https://eu-images.contentstack.com/v3/assets/blt07f68461ccd75245/blt789fd8a50c903ecb/661953fbed022e3be74935d2/windows1015046startscreenhero_0_5.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Q. How can I block the option in Windows Update to Check online for updates from Microsoft Update?
A. If you leverage WSUS you would have deployed policies to the machines to point them to the WSUS instance as the source of the updates available. In the Update settings area in addition to the Check for updates button there is also a link "Check online for updates from Microsoft Update" which will bypass WSUS and instead contact the public Microsoft Update servers. To remove this option you can use Group Policy
Open the policy
Navigate to Computer Configuration - Administrative Templates - Windows Components - Windows Updates
Double click Do not connect to any Windows Update Internet locations
Set to Enabled and click OK
About the Author
You May Also Like