When you configure update policies, we recommend you to get acquainted with all the settings that are available in each option of Windows Update section, and set the parameters suitable for your infrastructure and organization.We assume that in contrast to the server policy, updates to the client workstations are installed automatically at night after receiving the updates.I'm generally happy with the Windows Updates settings for workstations, aside from the below problem.Non-administrator users logged onto Win10 PCs are receiving a blue notification on screen "Updates are available", and they are given the option to "View Updates" and nothing else.In one of the previous articles we have described the installation of a WSUS server on Windows Server 2012 in detail.The next step – configure Windows clients to use a deployed WSUS server.
In some organizations, the use of USB-devices (flash drives, USB HDD, SD cards and so on) is disabled for safety reasons to prevent security leakage and virus infection.
I've made the following settings already in Group Policy: I want to prevent this "View Updates" bar from showing on the screen, as it interrupts non-administrator users.
The users on this network should not interact with Windows Update at all, and updates should be seamless.
Change the value to Use Group Policy or registry settings on computers. Open the Group Policy Management console and create two new group policies: Server WSUSPolicy and Workstation WSUSPolicy.
Let’s start with the description of the server policy Server WSUSPolicy.