A. Windows Update is a great tool for updating your computers; however, if you want to control the deployment of fixes, you might want to disable Windows Update. To disable it at a Group Policy level, perform the following steps:
- Start Group Policy Editor (GPE), and load the desired Group Policy Object (GPO).
- Expand User Configuration, Administrative Templates, Start Menu and Taskbar.
- Double-click "Disable and Remove Links to Windows Update" (Windows 2000) or "Remove links and access to Windows Update" (Windows XP).
- Select Enabled and click OK.
- Close GPE.
You can also edit the registry to disable Windows Update on a per user basis:
- Start regedit.exe on the machine where you want to disable Windows Update.
- Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.
- From the Edit menu, select New, DWORD value.
- Enter a name of NoWindowsUpdate, and press Enter.
- Double-click NoWindowsUpdate, and set it to 1.
- Close regedit.
You don't need to reboot. If the user tries to start Windows Update, the system will display the following error message:
Windows Update was disabled by your system Administrator.