How to disable “Restart your computer to finish installing updates” popup with GPO

group-policywindows-update

I've got some kiosk computers that are on a domain and permanently logged in, and receive updates for FEP through WSUS. This works great, except that occasionally, I get this dialog appearing in the bottom right hand corner:

I thought that by setting the No auto-restart with logged on users for scheduled automatic updates installations GPO to 'enabled', these wouldn't appear, but it seems like they still show up. Here's a screenshot of the Windows Update GPO I'm applying:

What am I missing? How do I turn these notifications off?

Best Answer

I think you'll need to use the user portion of Group Policy - same path, Admin Templates, Windows Components, Windows Update and use Remove Access to use all Windows Update features set to Enabled, and with the setting 'Configure Notifications' set to 0.

If you want WU's to apply, you'll obviously need it set to the (machine side of GP) option that says automatically download & schedule the installation as the user will not be able to interact with WU in any way.

Related Solutions

GPO to disable Windows XP tour popup

HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Tour\RunCount

The registry key's value is REG_DWORD type, setting it to "0" will disable the pop-up.

You can set this value in GPO using a logon script or, preferably, Client-Side Preferences. A logon script would look something like:

REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Tour" /v "RunCount" /t REG_DWORD /d "0" /f

http://support.microsoft.com/kb/311489

Edit: Here's an ADM that should perform the same function, if you're into that kinda thing.

CLASS USER
 CATEGORY "Software Settings"
  CATEGORY "Microsoft"
   CATEGORY "Windows"

    POLICY "Windows XP Tour Pop-up"
     KEYNAME "Software\Microsoft\Windows\CurrentVersion\Applets\Tour"
     EXPLAIN "Display the Windows XP tour icon in the system tray."
     VALUENAME "RunCount"
     VALUEON  NUMERIC 1
     VALUEOFF NUMERIC 0
    END POLICY

   END CATEGORY
  END CATEGORY
 END CATEGORY

Per @natxo's comment below, the above will disable the pop-up on a per-user basis. You can use this to target specific user groups/OUs if you want. Should you wish to disable the pop-up on a per-computer (all users) basis, change "HKCU" to "HKLM" in the script or change "USER" to "MACHINE" in the ADM. This is detailed in the Microsoft Support link above.

Disable windows sbs2008 updates via GPO

Look under [Computer/Administrative templates/windows components/Windows Update]

Best Answer

Related Solutions

GPO to disable Windows XP tour popup

Disable windows sbs2008 updates via GPO

Related Topic