Status of Windows Update Service

Hello,

There is a PCI requirement to stop the Windows Update Service. I want to know if BigFix will be able to push out patches if the windows update service is stopped/disabled?

Could someone please advise?

Thank you,
Jennifer

The service has to be able to start in order to apply updates. That’s not a BigFix thing, that’s a Microsoft Update thing.

The service can be Stopped, but cannot be Disabled - it has to be able to start itself as needed to apply updates.

To prevent Windows Update from automatically downloading/installing updates, you should use the Group Policy settings for managing Windows Update, rather than disabling the service.

1 Like

Thank you, Jason! That helps a lot!