|
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
Hey Y’all,
I was checking things in Windows (10.0.17134 Pro) Update today and ran across this:
The Defer Quality Updates option is grayed out.
The same page shows that *Some settings are managed by your organization.
Clicking the “View configured update Policies” link shows:
However, if I view the windows update settings in the Group Policy Editor I get this:
Computer Settings:
User Settings:
I see nothing configured? Ideas?
RG, in GPE select those blocked policies to “Enabled”, and the highest level available, close GPE, then re-open it and again set them to “Not configured”.
If that doesn’t do it, try it again with a reboot in between.
bbearren,
It was a good thought but no love.
I hunted through the registry but although I found the entries they didn’t match the values in Advanced options and changing them had no effect even w/reboot.
I thought I’d take a stab at a restore point and found this:
You nasty Windows Update you! Do that restore back to the 26th. No love here either.
Out comes the bi-weekly (12/21) Macrium Reflect Image. Restore C: partition only. Ah, you can always trust MR! Things back to normal.
Still wish I knew what exactly happened? 😎
I’m sorry that I have to laugh. We all have battles, but the worse thing is that most of them are different. There is almost a M$ AI that knows what will annoy individual users…
@RetiredGeek
1809 Build 17763.195
OK, here’s what I found in three posts:
In Group Policy Administrative TemplatesWindows ComponentsWindows Update
It is the settings under “Windows Update for Business” that control the option in the Settings GUI. Initially, I had both “Select how Preview Builds and Feature Updates are Received” (Semi Annual Channel with 365 days delay) and “”Select when Quality Updates are received” set to “Enabled” and values set. This resulted in the graying out of the settings in the GUI and the list of controls (See images 1,2,3 – not inserting due to size)
If I set “Select how Preview Builds and Feature Updates are Received” to “Not configured” and leave “Select when Quality Updates are received” Enabled, I get what RG is seeing (See image 4, 5)
If “Select how Preview Builds and Feature Updates are Received” stays Enabled, and Select when Quality Updates are received” is set to “Not configured” I get what is in Images 6 & 7.
If both “Select how Preview Builds and Feature Updates are Received” and “Select when Quality Updates are received” are left “Not configured” (see images 8 & 9), the control is left to the Settings GUI.
That makes sense. Group Policy overrides the Settings GUI in a managed environment.
I did not try to see how Group Policy and the Registry interact (and who knows which one, if any, Microsoft respects), but perhaps the settings in the Registry are in different places for just plain “Windows Update” and the managed “Windows Update for Business.” If you are expecting to see the changes under Windows Update, and they are somewhere else……?
Viola!
@RetiredGeek does that work for you?
Excellent sleuthing. @PKCano, want to write it up for an AKB?
But you didn’t finish the sentence……
I mess around with stuff so much this is most likely a my machine only problem.
Sounds like me, RG. I did some tinkerin’, and found that while logged in as a regular user, I could make Group Policy changes using “gpedit.msc (run as administrator)” and the changes would be made, but not make changes at the desired level.
Even signing out and then signing back in made no difference. Then I signed out my regular user account, signed in as Administrator, and the changes had been made in Windows Update. After I signed out as Administrator, then signed back in as a regular user, the changes had stuck, and the appropriate changes were reflected in Windows Update.
Hey Y’all,
I’ve narrowed down the problem to the update that was installed on 1/4/2019. Unfortunately, I didn’t write down what update that was grrrrr!
Here’s what is installed with things working correctly.
Maybe someone could sus out which update is causing the problem from this?
KB4023057 is the Upgrade Assistant. I would uninstall that one. It encourages forced UPgrades.
Also known as the ‘anti-tweaker’, i.e. actively looks for tweaked settings (like disabled Windows Update service and disabled scheduled tasks) and force-reverts them to what MS want you to have. I agree, KB4023057 is entirely unnecessary.
Rick,
Unfortunately, It doesn’t seem like MS wants me to Uninstall that update:
Looks like I’ll have to go back another generation of images to get rid of it. Since thing seem to be working OK I may let it ride for now.
PK,
You’re on the 
Thanks! 😎
Note: It still shows as installed in View update history! Could be confusing for some.
OK, history is history. It doesn’t go away. It doesn’t show they are “still installed” in history. It shows “at one time in history you installed them:. But it doesn’t know when/if you uninstall them.
History doesn’t change. If it happened, the record is still there no matter how many times it has changed since.
If it’s in “Installed updates” (or not), then you have the truth.
So there, for today’s lecture on “dumb” computers that you can’t believe anyway. 🙂
RG, As PKCano has written in post 244101 it’s enabling “Select when Quality Updates are received” that causes the issue resulting in the greyed out dropdown selector (and the “Some settings are managed by your organisation” message).
I’ve attached a .REG file (re-named to.TXT) which worked for me to remove the restriction and message: Remove-WU-policy-restriction
In other words, I followed PKCano’s lead to reproduce the issue and used a registry monitor to see what keys were changed. After that it was just a case of creating a .REG file to undo the effects.
After merging the .REG file you have to restart your PC ‘cos the change is not dynamic and HKLM needs to be read afresh. Actually that’s wrong… the change IS dynamic but the Settings app isn’t smart enough to re-read HKLM by itself.
For example, here the Group Policy Editor clearly shows the setting is ‘Not configured’ yet no amount of closing and re-opening Settings could get the ‘Policies set on your device’ to be read correctly… until I restarted.
(As with any registry change, backup your registry first/set a restore point.)
Hope this helps…
Rick,
As I stated earlier I think it’s just my machine.
Going to watch Wild Card games while I restore latest image. 😎
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
