Recommended Windows Update Configuration for Patch Management

This Article Applies to:

  • AVG Business Cloud Console

When Windows Automatic Update is configured to check for updates, even if it is not configured to download or install them, it can cause slow deployments with AVG Business Patch Management available in the Cloud Console.

Disable Automatic Updates through GPO

  1. Click Start, and then click Run
  2. Type gpedit.msc, and then click Ok
  3. Expand Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Update
  4. Select Configure Automatic Updates, choose Disabled, and click Ok
  5. As GPO updates every 90 minutes, you can force this update to take effect by running the following command: gpudate /force

Set Windows Update Service to Manual

On the Local Device

  1. From the local machine, open services.msc
  2. Find the Windows Update service, right-click and go to Properties
    • Stop the service before making any changes
  3. Set the Startup type to Manual and then click Apply/Ok to save the change


  1. Go to Computer ConfigurationPoliciesWindows SettingsSecurity SettingsSystem Services
  2. Find Windows Updates in the list, double-click to enter the configuration window
  3. Check Define this policy setting then select Manual
  4. Click Apply/Ok to save

Remove Specific Intranet Microsoft Update Service Location

  1. From GPO, go to Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows Update
  2. Find the setting "Specify intranet Microsoft update service location". If setting is currently configured, change to Not Configured