Windows 10 feature updates

[Zourous]

In my mind I had decided to keep the school generally on the Windows 10 xx09 release each year, so this summer I wanted to prepare and test a 1809 image and then deploy it out to slowly replace the previous 1709 image. In the group policies I had set the semi-annual channel (targeted) option along with the max defer period of 365 days. Just recently I have noticed some PC's trying to update from 1709 to 1803. Yes, this makes sense as 1803 is now over a year old and it was an oversight in my thinking. Is there any way to stop this as I can't think of a way at the moment. The xx03 versions have a shorter life so it doesn't really help me to have everything updating to this especially during the course of a working day.

[Guest Guest]

Are you using WSUS? If so there's a category called upgrades, if you uncheck that OS upgrades will no longer be synced. Although you'll have to decline any already downloaded updates to stop them from being installed

[Zourous]

I couldn't find the upgrades category on my WSUS but checking the computers registered the laptop that has tried to update to 1803 isn't registered so it doesn't seem that WSUS did it. I have the "Do not connect to any Windows Update Internet locations" enabled so it shouldn't get it from this route either, so I'm baffled at the moment.

[Burrout565]

Did anyone get any further with this? We've got machines downloading the feature updates daily even though allowing OS Upgrades are disabled in the registry and the semi-annual (targeted) option enabled.

[Zourous]

What we've done is to enable this new policy that was sneaked in by MS at some point:

 

Do not allow update defferral policies to cause scans against Windows Update

 

At the same time we've made sure that the PC's are at least pointing to WSUS. I think I read somewhere that if they are not, the policy above does nothing. I'm not completely confident what I've done is correct, but so far the same PC's haven't tried to do a feature update.

[Burrout565]

Perfect - I'll give that a go.

 

Thanks very much!