Once the WSUS (Windows Server Update Service) is implemented in your company network via Group policy, your Windows 11/10 or 8.1 computer will look for Windows updates via this local WSUS server. Though it helps the network administrator manage the updates and client computers optimally in a larger environment, it may create some issues for end-users. Follow the steps below to disable WSUS by registry key on Windows 10/11 without changing the Group Policy.
When a computer is set to get updates from WSUS, it may not be able to receive required or optional Windows updates until the administrator approves them on the server.
If you take your computer outside the local/company network, you can’t perform the Windows update. For example, you can’t install the latest Windows updates for your office laptop at home.
Also, it prevents any Windows features from downloading from the direct Internet because it is set to download from WSUS only.
This method is simple and easy. As an end-user, you can perform on your computer.
Note: This is a temporary solution. If you connect the computer back to the company network, the WSUS group policy will be applied automatically and revert the changes. The ideal permanent solution is to move your computer to a different OU where the WSUS policy is not applied, which the network/Windows update administrator can only do. So, as normal computer users, we have only the below option to disable WSUS in Windows OS.
- Open Registry Editor (Type regedit in Search)
- Access to the following location: HKLM/Software/Policies/Microsoft/Windows/WindowsUpdate/AU/
- Change the value from 1 to 0 in the UseWUServer key. 1 is to use a WSUS server, and 0 is to disable it.
- Once you have changed the above key from 1 to 0, close the registry editor and restart the Windows update service. Even if you are okay, restart the computer to take effect.
Here is the place to restart the Windows update service.
Remove WSUS by PowerShell
If you like to use Powershell commands on the local or remote computer to disable WSUS, follow the below steps.
- Search for PowerShell or access it from the Start menu, then right-click and select run as administrator.
- We need to stop the Windows update service before executing the command. Type Stop-Service -Name wuauserv to stop Windows update service.
- Remove the Windows update registry key that is related to WSUS. Type this command: Remove-Item HKLM: \Software\Policies\Microsoft\Windows\WindowsUpdate -Recurse
- Let’s start the Windows update service by typing Start-Service -name wuauserv
Now connect the computer to the direct Internet and try Windows update or any other component downloads from the Microsoft online update. It should work fine this time.
You may need to check some other guides related to Windows update issues.
Windows 10 Update stuck with 0x80080008 error
Latest Windows Server update issue and solution
If you are still facing some issues downloading and installing Windows updates on the direct Internet, the Windows update service/content may have been corrupted. It is nothing to do with WSUS anymore. You need to look into other directions to solve the problem.
If any of the above solutions did not fix the Windows PC issues, we recommend downloading the below PC repair tool to identify and solve any PC Issues.
Dinesh is the founder of Sysprobs and written more than 400 articles. Enthusiast in Microsoft and cloud technologies with more than 15 years of IT experience.
This method is simple and easy. As an end-user, you can perform on your computer.
Note: This is just a temporary solution. If you connect back the computer to the company network, the WSUS group policy will be applied automatically and revert the changes we are going to do below. The ideal permanent solution is to move your computer to the different OU where WSUS policy not applied, which can be done by the network/Windows update administrator only. So, as a computer user, we have only below option to disable WSUS on Windows 10.
To make Windows update/component to download from Microsoft online Windows update servers via the direct Internet, we can do these steps.
1) Open Registry editor (Type regedit in Search), and access following location.
HKLM/Software/Policies/Microsoft/Windows/WindowsUpdate/AU/
2) Change the value from 1 to 0 in UseWUServer key. 1 is to use WSUS server and 0 for not.
3) Once you have changed the above key from 1 to 0, close the registry editor and restart Windows update service. Even if you are okay, restart the computer to take effect.
Now connect the computer to direct Internet and try Windows update or any other component installation from the Microsoft Update website. It should work fine this time.
You may need to check some more guides here about Windows update issues.
На работе комп (win 10 corp/pro) введен в домен. Доменные настройки и обновления винды есть только для XP и win7. Соответственно win10 тоже настроился на локальный wsus, на котором для него ничего нет. Как можно (через реестр или как) указать системе обычные сервера обновлений через инет, а не локальные, не выводя из домена?
Переделать доменные настройки не предлагать
p.s. почему то просьба НЕ предлагать переделать настройки домена никого не волнует. я НЕ администратор данного домена, он находиться в другом городе и администрируется другими людьми (я лишь нахожусь в небольшом филиале и не имею к нему ни малейшего доступа). у нас официально не используется win 10 в работе и поэтому у нас и НЕ БУДЕТ в ближайшее время изменений в wsus. это не моя прихоть! я лишь сам интересуюсь десяткой и работаю на ней, так как сам по себе домен и большинство настроек он нормально принимает как и win 7
-
Вопрос задан
-
24704 просмотра
Пригласить эксперта
>>Источник<<
Чтобы воспользоваться Редактором реестра, выполните следующие действия:
Нажмите кнопку Пуск, выберите пункт Выполнить и наберите в поле Открыть команду regedit.
Найдите и выделите следующий раздел реестра:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
Параметр: UseWUServer
Значение: установите значение 1, чтобы указать службе Автоматического обновления использовать сервер, на котором запущены службы SUS, вместо веб-узла Windows Update.
Тип: Reg_DWORD
Поставить: 0
wsus, на котором для него ничего нет.
Сообщите об этом администратору WSUS. Необходимо включить соответствующую категорию обновлений для синхронизации.
Или скачивать их Каталог Центра обновления Майкрософт. Поскольку для Windows 10 выпускается одно кумулятивное обновление в месяц (редко, обновление безопасности, отдельно — но входящее в следующее кумулятивное) это не доставит больших хлопот.
Журнал обновлений Windows 10
А ведь сразу даже в голову не пришло:
указать системе обычные сервера обновлений через инет, а не локальные
C:\Windows\System32\drivers\etc\hosts
Войдите, чтобы написать ответ
-
Показать ещё
Загружается…
Минуточку внимания
The past 8 or more years most of us have managed PC updates using WSUS (Windows Server Update Service) and Group policy. However, the structure of the modern office has changed to a large percentage of mobile employees who never ‘touch down’ at headquarters. If these devices do not connect to the domain they do not have updates applied.
A client who has not returned to the office in 18 months, and likely will not for the life of their laptop, recently asked how they could update their machine manually. Currently they were not able to do so as Windows Update showed “settings are managed by your system administrator”, in other words, by WSUS
It is quite simple to disable WSUS management in the registry, however remember if the device is reconnected to the domain, the WSUS policies will be reapplied. Therefore you may want to move the device to an OU not linked to the WSUS policy or remove the device in the policy under security filtering.
Disclaimer: Be aware making incorrect registry changes can have disastrous effects to the health of the device. Be sure to backup the registry before editing. To do so see the following Microsoft article; “How to back up and restore the registry in Windows” http://support.microsoft.com/kb/322756
- Open the registry editor, by entering Regedit in the Start / Run box, and browse to: HKLM\Software\Policies\Microsoft\Windows\
- Locate the WindowsUpdate Key and delete it
- Reboot the PC (may take 2 reboots)
- Now you can manually update and configure Windows updates to automatically check for and install updates directly from the Microsoft Update site
You may want to consider using a newer service such as Windows Intune to manage your computers, especially mobile devices. http://www.microsoft.com/en-us/server-cloud/products/windows-intune/
More often than not, it is difficult to tell whether Windows Update failure is caused by WSUS itself or by Windows operating system. In that case we may need to remove WSUS settings from the client and restore Windows Update default settings in order to find out where the problem resides.
More often than not, it is difficult to tell whether Windows Update failure is caused by WSUS itself or by Windows operating system. In that case we may need to remove WSUS settings from the client and restore Windows Update default settings in order to find out where the problem resides.
Here are two methods to achieve this.
Remove WSUS Settings via PowerShell
- Click Start and open PowerShell as Administrator (Right Click > Run as Administrator)
- Stop the Windows Update Service by entering the command:
Stop-Service -Name wuauserv - Remove the Windows Update registry key by entering the command:
Remove-Item HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate -Recurse - Finally, restart Windows Update Service by running: Start-Service -Name wuauserv
Remove WSUS Settings Manually
- Click Start and type regedit into the start search box, then Right Click and Run as Administrator.
- Navigate to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\
- Right Click and Delete the registry key WindowsUpdate, then close the registry editor.
- Open the Services Console by entering services.msc in the start search box.
- Find and restart the Windows Update Service