Reject windows 10 free upgrade with Microsoft Windows Server Update Services 3.0 SP2?

Question

is it possible to reject windows 10 free upgrade with Microsoft Windows Server Update Services 3.0 SP2 ? I would like to block every possible free upgrade in my network, and I need to prevent the upgrade on several windows 7 pro and windows 8.1 pro machines. Can it be done with wsus 3.0 sp2? Would you recommend that course of action? Thank You.

Don't give your users administrative permissions on their machines. — EEAA, Oct 12 '15 at 12:27
Wish I was the one that could decide that. I am looking for a way to do it in wsus. — Malkavian, Oct 12 '15 at 14:05

Katherine Villyard · Accepted Answer · 2015-10-12T14:21:09.467

3

You could block the updates that include the Get Windows 10 app in WSUS.

For Windows 7 SP1:

KB3035583
KB2952664

For Windows 8.1 Update:

KB3035583
KB2976978

(I got those here.)

If you've already approved them, you might be able to decline them and roll them back.

That doesn't block them from the web page, but you might be able to block that page at the firewall.

edited Oct 12 '15 at 14:21

answered Oct 12 '15 at 14:08

Katherine Villyard

18,510
4
36
59

1

seems you are right: i am now rejecting the followings: If you are using Windows 7: kb3035583, kb2952664, kb3021917 If you are using Windows 8: kb3035583, kb2976978 – Malkavian Oct 12 '15 at 15:54

score 0 · Answer 2 · answered Oct 12 '15 at 14:08

In short: take away administrative privileges from your users.

Wish I was the one that could decide that.

Unfortunately that is the answer to your question. Even if you disabled this in WSUS, there are still many other mechanisms your users could use to upgrade if they wanted to. WSUS is not meant to enforce policy.

If you want to enforce policy, you'll need to use Active Directory and Group Policy. With those two technologies in place, doing what you want becomes trivial.

Reject windows 10 free upgrade with Microsoft Windows Server Update Services 3.0 SP2?

2 Answers2