Windows Update Registry Settings

Content Authoring BigFix.me
1

Hi Folks,
I have a working fixlet that can set the windows update registry settings. However, if am going to be executing the fixlet against three different types of windows, I don’t want to have too many identical fixlets. Perhaps, by using if statement based on x64 or x32, and windows 2016 or windows 10.

This is what I have so far.

if{name of operating system starts with “Win2016”}
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ActiveHoursEnd”=dword:00000016
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ActiveHoursMaxRange”=dword:00000012
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ActiveHoursStart”=dword:00000006
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “AutoRestartDeadlinePeriodInDays”=dword:00000005
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “AutoRestartDeadlinePeriodInDaysForFeatureUpdates”=dword:00000007
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “AutoRestartRequiredNotificationDismissal”=dword:00000002
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ConfigureDeadlineForFeatureUpdates”=dword:00000007
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ConfigureDeadlineForQualityUpdates”=dword:00000005
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ConfigureDeadlineGracePeriod”=dword:00000002
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartDeadline”=dword:00000000
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartDeadlineForFeatureUpdates”=dword:00000000
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartSnoozeSchedule”=dword:00000003
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartSnoozeScheduleForFeatureUpdates”=dword:00000003
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartTransitionSchedule”=dword:00000007
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartTransitionScheduleForFeatureUpdates”=dword:00000007
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetActiveHours”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetActiveHoursMaxRange”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetAutoRestartDeadline”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetAutoRestartRequiredNotificationDismissal”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetComplianceDeadline”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetEngagedRestartTransitionSchedule”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “WUServer”="http://server0"
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “WUStatusServer”="http://server0"
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “AllowMUUpdateService”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “AUOptions”=dword:00000004
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “AutoInstallMinorUpdates”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “DetectionFrequency”=dword:00000016
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “DetectionFrequencyEnabled”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “IncludeRecommendedUpdates”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “NoAutoRebootWithLoggedOnUsers”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “NoAutoUpdate”=dword:00000000
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RebootWarningTimeout”=dword:00000005
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RebootWarningTimeoutEnabled”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RescheduleWaitTime”=dword:0000001e
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RescheduleWaitTimeEnabled”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “ScheduledInstallDay”=dword:00000000
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “ScheduledInstallEveryWeek”=dword:00000001
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “ScheduledInstallTime”=dword:00000003
regset64 “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “UseWUServer”=dword:00000001
endif

if{(name of it = “Win10” AND NOT x64 of it)of operating system}
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ActiveHoursEnd”=dword:00000016
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ActiveHoursMaxRange”=dword:00000012
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ActiveHoursStart”=dword:00000006
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “AutoRestartDeadlinePeriodInDays”=dword:00000005
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “AutoRestartDeadlinePeriodInDaysForFeatureUpdates”=dword:00000007
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “AutoRestartRequiredNotificationDismissal”=dword:00000002
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ConfigureDeadlineForFeatureUpdates”=dword:00000007
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ConfigureDeadlineForQualityUpdates”=dword:00000005
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “ConfigureDeadlineGracePeriod”=dword:00000002
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartDeadline”=dword:00000000
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartDeadlineForFeatureUpdates”=dword:00000000
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartSnoozeSchedule”=dword:00000003
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartSnoozeScheduleForFeatureUpdates”=dword:00000003
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartTransitionSchedule”=dword:00000007
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “EngagedRestartTransitionScheduleForFeatureUpdates”=dword:00000007
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetActiveHours”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetActiveHoursMaxRange”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetAutoRestartDeadline”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetAutoRestartRequiredNotificationDismissal”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetComplianceDeadline”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “SetEngagedRestartTransitionSchedule”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “WUServer”="http://server0"
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]” “WUStatusServer”="http://server0"
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “AllowMUUpdateService”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “AUOptions”=dword:00000004
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “AutoInstallMinorUpdates”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “DetectionFrequency”=dword:00000016
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “DetectionFrequencyEnabled”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “IncludeRecommendedUpdates”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “NoAutoRebootWithLoggedOnUsers”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “NoAutoUpdate”=dword:00000000
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RebootWarningTimeout”=dword:00000005
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RebootWarningTimeoutEnabled”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RescheduleWaitTime”=dword:0000001e
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “RescheduleWaitTimeEnabled”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “ScheduledInstallDay”=dword:00000000
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “ScheduledInstallEveryWeek”=dword:00000001
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “ScheduledInstallTime”=dword:00000003
regset “[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]” “UseWUServer”=dword:00000001
endif

2

Domain GPO or Local Group Policy will overwrite all of these settings at group policy refresh time. I suggest using LGPO instead to apply Local Group Policy. I have content for that here in the forum and at BigFix.me, search for lgpo

3

I have a group of computers working remotely, and not reaching the network, in timely manner for the gpo to set the policies. The goal is to have a temporary fix until the computer(s) return to the network.

4

Ok then.

I’d just use createfile to create a .reg file with the settings, disable wow64 redirection, and use regedit /s to import it. So you don’t need to worry about 32 vs 64 bit.