Windows 10: Win 10 Anniversary, automatic updates & Group Policy Settings

Hello, I've just installed KB3176929. Now I am running Windows 10 Education v1607, b14393.10.

Almost everything it's fine despite "Windows Update Settings" *Mad.

In the past I've used Local Group Policy Editor​ to tweak the settings and make Windows notify me when I need some update, without downloading or installing anything.

Now, in gpedit the relevant policy is still correct:




The problem is that in the Update section, under Settings it shows the following:




So it's clearly stated that download and installation will be executed without user intervention.
Also Active hours button is also displayed, but I have never had this before Anniversary update.


Before this update my Update Settings screen was similar to this one:




What I have already tried to get back the previous behavior:

• set the policy Configure auto updates to not configured
• shut down and power up
• set the policy Configure auto updates to enabled & 2 = Notify before...
• manually checked for update
• reboot

I did not succeed.

Is this policy still applicable to Win 10 Edu?
Have you any suggestions?

Many thanks *Smile

P.S.: I am wondering if disabling active hours from registry can help or not.

:)

 

My Issues with the Anniversary Update

The GP edit issue seems to be a display bug when reading though multiple posts on Win 10 Anniversary, automatic updates & Group Policy Settings Solved - Windows 10 Forums

Can you confirm that this GPO is still supposed to work and that the displayed message is wrong?

 

Windows 10 Pro Automatic Updates / Group policy. How can I really disable Automaic Updates?

Thank you again Eeshwar.

Your statement: 'I would like to inform that unfortunately all the updates will be installed in your Operating System and it is by design' is not correct.

That statement is correct for Windows 10 Home but it is not correct for Windows 10 Pro.

The Group Policy Editor (gpedit.msc) allows one to configure Windows Updates.

The Group Policy Editor IS NOT available under Windows 10 Home.

The Group Policy Editor IS available under Windows 10 Pro.

If you are running Windows 10 Pro or Enterprise you can:

1.) Win+r

2.) Type: gpedit.msc and enter.

This will start the 'Local Group Policy Editor'.

Look at: Computer Configuration ->Administrative Templates -> Windows Components -> Windows Updates.

There are 19 settings for configuring how Windows Updates occur.

I have:

1.) Configure Automatic Updates 'Enabled' and set 'Configure automatic updating' to '2 - Notify for download and notify for install'.

2.) I have 'Allow Automatic Updates immediate installation' Disabled.

Eeshwar, do not give up on me! This is a real issue!

Thank you.

 

I also posted the same issue for Win 10 Pro here:

https://www.tenforums.com/installatio...pressions.html

However, it may actually be working because I received a pop up notification that updates were available; however, I didn't capture that but I did get this screenshot:





In summary, I did get notified and they didn't download automatically.

 

I receievd the same notification, maybe Win Update is working as intended.

If so, the settings description is misleading a bit.
It would be great if more pepole can report their experiences *Wink

 

Same here with Win 10 Pro. I have set via GPEdit the Windows Update option to notify for download and install, but get the same indicator on the Settings screen that they would be automatically downloaded and installed. But it appears to notify on the Action Center that an update is available and does not download until I click "check".

JohnD

 

I got the same odd message on the WindowsUpdate-window after the upgrade, while gpedit is set to notify only. Since I am using ESET Smart Security and not Windows Defender, I removed Silverlight hoping to confirm/deny the update issue. Otherwise waiting would take quite some time.

Now I'm waiting for Windows Update to figure out there's supposed to be something offered as available, but that takes a while, I already increased the frequency of checking with gpedit.
ESS, which also informs me about Windows Updates, noticed Silverlight as available hours ago*sarc

If I manually hit search, the gpedit setting will most likely be ignored, like before the update... So the only thing to do, is wait.

 

You might want to follow my discussion in the Microsoft Community about this. MS came back and mentioned the "Active Hours" option that is now included in the Anniversary Update. I don't find this helpful.

My Issues with the Anniversary Update

JohnD

 

I'm glad I found this. Having updated to 1607 last night and rechecked GPEDIT I could not understand why I was not seeing the "Some settings are managed by your organisation" message in Windows Update. Hopefully it is only that message that has changed.

Active Hours is no good to me. The idea of fixed hours in this day and age is laughable.

Dave

 

So, does it mean that windows update group policy setting actually takes effect, but it simply doesn't show up in windows settings?

Another question; I clicked on check for updates and it found one, BUT it did not show me an "install" button and immediately started downloading and installing. Has it always been like this in windows 10 or is it just a 10 AU thing? Group policy is set to notify for both download and install.

P.S. windows 10 AU is my first, proper go with the OS.

 

Until we get some updates, I cannot tell if the GP Edit setting is still in effect. On another system I have, which has Windows Defender, it just notified me of updates for it and did not install them until I did the check. I will have to try it again. I don't know if regular updates will act differently.
Once you click "Check for updates", it will immediately download and install any available updates. It is not like Windows 8 and prior where it would give you a list of updates and you could pick and choose any or all updates to process.

JohnD

 

If it doesn't download automatically until you actually click the check button, running the show/hide tool before you check you could hide any you do not want? I've done this all the time since W10 release.

Tutorial for the tool can be found here Windows Updates - Hide or Show in Windows 10 - Windows 10 Forums

I've not updated to the anniversary update yet so can't check.

 

My understanding of that tool is that you must already have the update installed for it to hide something.

JohnD

 

Update, after installing an older version of Silverlight because Windows Update didn't offer Silverlight at all:




I don't think I have to translate this, looks like the gpedit-setting still has effect *Smile , even though it says otherwise below at the "update settings" part.

 

I agree. I have one system that has Windows Defender for an antivirus. Whenever I bring it up, I get a notification that an update is available. When I go to the "Settings" > "Update & security" > "Windows Update", it lists the update for Defender as available. When I click "Check for updates", it then downloads and installs it. I will see what happens Tuesday when most likely we will get a regular update. I have not yet applied the AU to my desktop which somewhere has buried (I assume in the Registry) the old "Never check for updates" setting. This setting was retained when I upgraded it to Win 10 a little over a month ago. It will be interesting to see what ends up there when I install the AU. It would be nice if they showed what setting it was actually using.

JohnD