WSUS Updates handled via registry

[basicchannel]

Hi,

 

So I'm learning new things about the shocking state of my inherited network every day, and today I finally get around to updates and realise they're handled on a registry level. I would like them to be handled via a script which picks up authorised updates from WSUS on a set day of the week, so I can properly control updates.

I think the previous guys who created our existing images, literally just set the registry values for each single image and GHOSTed it over the network.

What would be the best way to switch off the registry handling of updates, so I can use a script instead?

 

OR could I just disable it in GP and leave the registry as is?

 

I hope this makes sense.

 

Many thanks

[basicchannel]

Actually, if I run a login script that changes the NoAutoUpdate value from 0 to 1, this should do the trick, right?

[ihaveaproblem]

Any reason for wanting to use a script ?

Be much easier and cleaner if you use the group policy windows update settings.

[Michael]

Not entirely sure how that would work. The recommended method is to allow the Windows Update service (along with BITS) to deploy updates accordingly.

 

Workstations can be placed into groups in WSUS and you can specify certain updates to be deployed to those computers.

 

You can control what time(s) WSUS deploys updates via Group Policy.