Group policy for updating registry on client computers


Although Windows Update and WSUS are both generally pretty simple to configure, you can sometimes gain a higher level of control over them by making a few minor modifications to the Windows registry.In this article, I will show you some registry keys that are associated with Windows Update.One of the problems with receiving updates from a WSUS server is that users are not allowed to approve or disapprove of updates unless they are a member of the local administrators group.

On the flip side, you could also deny end users the ability to approve updates, reserving that right for Admins.

The registry key that controls this behavior is: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Update\Elevate Non Admins The Elevate Non Admins key has two possible values.

The idea behind this key is that the PC must report its status to a WSUS server so that the WSUS server knows which updates have been applied to the PC.

The WUStatus Server key normally holds the exact same value as the WUServer key (example:

Client side targeting isn’t used by default, but if you decide to use it, then there are two different registry keys that you will have to create.