Recommended Windows Update Configuration for Patch Management

 

When Windows Automatic Update is configured to check for updates, even if it is not configured to download or install them, it can cause slow deployments with Avast Business Patch Management available in the Business Hub.

Disable Automatic Updates through GPO

1. Click Start, and then click Run
2. Type gpedit.msc, and then click Ok
3. Expand Computer Configuration > Administrative Templates > Windows Components > Windows Update
4. Select Configure Automatic Updates, choose Disabled, and click Ok
5. As GPO updates every 90 minutes, you can force this update to take effect by running the following command: gpudate /force

Set Windows Update Service to Manual

On the Local Device

1. From the local machine, open services.msc
2. Find the Windows Update service, right-click and go to Properties
   • Stop the service before making any changes
3. Set the Startup type to Manual and then click Apply/Ok to save the change

Via GPO

1. Go to Computer Configuration > Policies > Windows Settings > Security Settings > System Services
2. Find Windows Updates in the list, double-click to enter the configuration window
3. Check Define this policy setting then select Manual
4. Click Apply/Ok to save

Remove Specific Intranet Microsoft Update Service Location

1. From GPO, go to Computer Configuration > Administrative Templates > Windows Components > Windows Update
2. Find the setting "Specify intranet Microsoft update service location". If setting is currently configured, change to Not Configured