Indefinite delay for feature updates

Topic

New Reply

Hi, we have Win10 pro machines deployed in factories, they are part of AD and have an internet access, updates  are managed by SCCM.

If we add these machines to a collection and never deploy updates to that collection, is it possible to guarantee that updates will never be deployed to these machines? My concern is that after a certain amount of time, they will ignore the SCCM update server settings, hit MS updates and deploy from there.

Is that concern unfounded? Thanks.

Reply | Quote

Replies

I believe that with your setup you can always hold off feature updates, have in mind that  monthly updates can make your windows systems forget that settings

in the worst case I recommend wushowhide to make sure that upgrades are always hidden.

Just someone who don't want Windows to mess with its computer.

Reply | Quote

Group Policy is your friend. You obviously use it to set the update server to point to your SCCM box, so Windows will never phone home for updates.

To make sure the setting sticks, apply the policy every machine boot.

cheers, Paul

Reply | Quote