question

haZ-2263 avatar image
0 Votes"
haZ-2263 asked ·

Intune OMA-URI

hello experts i hope someone can help with the below :

how can i create a custom policy ( oma-uri) with intune to change the below key registry HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU noautoupdate =0

i know it can be done via powershell script using remediation , but i need it as a profile to win over the local group policy i have .

mem-intune-general
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Reza-Ameri avatar image
0 Votes"
Reza-Ameri answered ·

Intune has several build-in policy to manage updates and you won't need to change the registry, take a look at:
https://docs.microsoft.com/en-us/mem/intune/protect/windows-update-settings

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

haZ-2263 avatar image
0 Votes"
haZ-2263 answered ·

Thanks for the reply , i have configured so far AllowMUUpdateService and AllowUpdateService values , but none seems to set the value of the noautoupdate = 0 ...

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

haZ-2263 avatar image
0 Votes"
haZ-2263 answered ·

75144-capture.jpg



do you have an idea which csp change this value ??


capture.jpg (26.9 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered ·

That won’t work as the GPO will revert it again. What you should do is remove the GPO policy if you want Intune to manage updates on the devices.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered ·

@haZ-2263 Thanks for posting in our Q&A.

For this issue, I have done the test in my lab. I tried to deploy a custom policy to enable automatic updates. I can see the policy under "Policies set on your device", but the registry key of noautoupdate is also "1", not set to "0".
75266-image.png

So, I think policies have precedence. For this policy, GPO precedes over intune. Given this situation, it is suggested to make it via PowerShell Scripts.

Thanks for understanding.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (81.1 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

haZ-2263 avatar image
0 Votes"
haZ-2263 answered ·

Thank you for the reply ,

which key did you use when creating your custom csp ? AllowUpdateService ?

also ,with powershell the GP will win over the script and change it back to default value ! so i dont think its going to work. do you ?


· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@haZ-2263 Thanks for your response.

The following picture shows the settings in my test.
OMA-URI:./Vendor/MSFT/Policy/Config/Update/AllowAutoUpdate
Data Type: Integer
Value: 0
75560-image.png

In terms of whether the script can change this registry key, I'm not sure. It's just a thought. What I confirm is that custom profile doesn't work. So I agree with RahulJindal, his method seems better.


0 Votes 0 ·
image.png (46.8 KiB)
RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered ·
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.