Critical System Protection

 View Only
  • 1.  Restricting windows update access via CSP Policy

    Posted Oct 03, 2013 01:44 PM

    What would be the best way to restrict the ability of windows update installs via CSP?



  • 2.  RE: Restricting windows update access via CSP Policy

    Posted Oct 03, 2013 01:51 PM

    Here is how to block Windows Update:

    For the service:

    Add

    %systemroot%\system32\wuaueng.dll

    To the Service Options > Specify service MODULES that should have no privileges.

    For interactive/user:

    Add 

    %systemroot%\system32\wuapp.exe
    %systemroot%\system32\wuault.exe 

    To the Interactive Program Options > Specify Interactive Programs that should not start



  • 3.  RE: Restricting windows update access via CSP Policy

    Posted Oct 07, 2013 12:10 PM

    Chuck,

     

    I am trying this approach today. I need to let this run for a few days before I mark this as a solution. I have two questions I hope you can help me with on a different subject altogether. I'll create a new thread for it.



  • 4.  RE: Restricting windows update access via CSP Policy

    Posted Dec 10, 2013 07:25 AM

    Chuck is right...just one correction:

     

    The file is %systemroot%\system32\wuault.exe and not %systemroot%\system32\wualt.exe