Windows – Blocking downloads (But allow Windows Update) using Group Policy

group-policywindowswindows-update

We have a Draytek VigorPro 5510 that is configured to block downloads on the 10.0.65.xxx range (this is the range all of our user workstations are on) but allow them on 10.0.10.xxx range (this is the range all of our admin machines are on)

Obviously, this has stopped Windows Update working.

Is there a way I can set Group Policy to stop downloads (we use a mix of IE and Firefox)

Or is there something else I can do.

I've looked at WSUS but this seems a bit over-kill for what i require

Best Answer

WSUS really is the way forward on this one.