Hello all, I have deployed SUP and Patching is working as expected.
However my end users are able to use windows update, How can i block end users to stop installing patches from internet, I have windows 10 Enterprise and Professional Machines as end users. I have tried to deploy a group policy to disable Computer Configuration\Administrative Templates\Windows Components\Windows Update. 1. Find and double-click *Configure Automatic Updates *[image: 0711 group policy step 3] <https://cms-images.idgesg.net/images/article/2016/06/0711-group-policy-step-3-100666831-orig.jpg> 2. In the resulting dialog box, select *Enabled.* 3. In the Options box, pull down the *Configure automatic updating* menu and select your preferred option. [image: 0711 group policy step 4 and 5] 4. Still Updates are able to scan by user with ms site, How can I achieve this ? -- Thanks, ED

