Business Problem: When server admin logs into servers the Server Manager displays a false-positive alert beside services for every Chromium-based web browser.
The false alert is there because all Chrome / Chromium-based web browsers implement an update service that by design starts with Windows, checks for updates and then stops the service. Windows sees this as a bad thing, so it shows the alert.
Desired solution: a way to automatically uncheck the box beside those services (perhaps via group policy, a registry key, or via user login script).
My main goal here is time savings. Currently, it takes an admin about 1-2 minutes per server (once they're logged in) to manually uncheck the checkbox beside "Microsoft Edge Update Service (edgeupdate)" in both "Local Server" and "All Servers" drop-downs. With 400 servers x 2 minutes each is about 13 hours of admin time lost just to uncheck two checkboxes. Since this setting is user-specific, EVERY admin has to do this to avoid false positives.
Solutions that do not meet the business objective:
1. Disabling the Windows Service
If you were not security conscious, you could prevent the alert from being displayed by disabling the Windows service completely. That could be done with group policy (Computer Configuration - Policies - Windows Settings - Security Settings - System Services - "Microsoft Edge Update Service (edgeupdate)" - set to Disabled), but that approach would remove the automatic updating of the browser, and would therefore put you at greater risk than leaving it enabled.
2. Manually unchecking the boxes
Our techs know that they can Drop the Services Dropdown and uncheck the checkbox beside "Microsoft Edge Update Service (edgeupdate)" to clear the alert for Local Server, and then do the same again under All Servers, but doing that only helps them, on that one server because that setting is user-specific. This is also time-consuming at about 2 minutes per server * 400+ servers = hours of work.
Question for the Group:
Does anyone know WHERE the Server Manager stores the value when a person manually unchecks the box beside the "Microsoft Edge Update Service (edgeupdate)" in Local Server and All Servers?
If it is a registry key, then we could craft a .reg file that runs automatically only login for each admin.
If it is a file system setting, then we could change it via a batch file or PowerShell script.
