question

VossTamara-6928 avatar image
0 Votes"
VossTamara-6928 asked VossTamara-6928 edited

Windows 10 20H2 - automatically checking for updates online although it's disabled

Hi,
we just started to update some of our 1909 Windows devices to 20H2. Since we are using SCCM, we don't want devices to check online for updates, so we disabled that via GPO. It all worked as it should on previous versions, but for devices that run 20H2, although the GPOs apply without error and the registry keys show they are applied, the devices check for updates online and also on my device installed them automatically.

Why is that? How can we stop that? What are we missing? Can anybody help?

mem-cm-updates
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

the devices check for updates online

What specifically lead you to this conclusion?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VossTamara-6928 avatar image
0 Votes"
VossTamara-6928 answered VossTamara-6928 edited

You mean why I think it checks online for Updates from Internet? Because one day I noticed this icon in my taskbar and it asked for a reboot:
105881-notification.jpg


and then we checked the other devices with 20H2 and they all showed that they had checked for updates that day, while 1909 looked different:

105882-compare.jpg



notification.jpg (7.4 KiB)
compare.jpg (57.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Amandayou-MSFT avatar image
0 Votes"
Amandayou-MSFT answered

Hi @VossTamara-6928

I test it in my environment, in 20H2, if we did not disable check online for updates, it will be shown the following screenshot:

106116-6161.png

After disabling check online for updates, it will be shown the following screenshot in the tab of Windows update:

105970-6162.png

The record of DisableWindowsUpdateAccess is shown in Registry Editor:

106066-6164.png

And the corresponding GPO is Turn off access to all Windows Update feature:

106085-6163.png



If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



6161.png (130.7 KiB)
6162.png (83.4 KiB)
6164.png (226.8 KiB)
6163.png (450.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VossTamara-6928 avatar image
0 Votes"
VossTamara-6928 answered Amandayou-MSFT commented

HI,
yes, I found this setting by now, too. It was not required on 1909. I tested it, and it makes it look like this:
106153-error.jpg



Displaying as error, although it's intended and not error, is not really nice, can create lots of confusion about update situation, but if that is the only option, I guess we will have to deploy that setting...


error.jpg (49.8 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

I test it in my environment, and there is no error in it. If when we have issue with deploying update using SCCM, we warmly welcome you to post in this forum again.

Have a good day!

Best regards,
Amanda

0 Votes 0 ·
VossTamara-6928 avatar image
0 Votes"
VossTamara-6928 answered VossTamara-6928 edited

Hi,
no, we don't have issues with SCCM Updates, we have issues with the native Windows Updates checking online. If we block access to Internet Resources, we get the error shown above, although it's not an error, it's intended. But it will cause confusion, therefore we don't like this solution. Why does 20H2 ignore the setting to disable automatic updates? Any idea?
Thanks and have a great day, too.
Tamara

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.