
Obviously full administrators with windows update access should be out of that OU. In the details pane open "Remove Access to use all Windows Update features" and enable it.Īll the users on that OU won't have access to Windows Update. If you have users with administration rights but they're not the responsibles of install updates you can create a new OU for that non full administrators and link a GPO on that OU.Įxpand Administrative Templates, expand Windows Components, and then click Windows Update. Mode 2 (not all administrators have Windows Update permission) In the details pane, click Allow non-administrators to receive update notifications, and set the option. In GPO Object Editor expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update. If it does, you may need to customize the application to stop interfering with Windows Update in the future. Obviously non real administrators should use a non-administrators group account Restart your computer and see if Windows Update works after disabling your antivirus. Mode 1 (only administrators have Windows Update permission)ĭisable notifications for non-administrator users.

Create/Modify a GPO using the Group Policy Object Editor.
