Windows 10 - Prevent Windoys Update Agent from going on Internet

[syparon]

Gents,

We use SCCM in our environment.

When we uninstall the SUP, the local policy pointing to the SUP is deleted on all machines.

In this case, We would like to prevents the Windows Update Agents from going on the internet and applying the new feature update.

I already observed that some GPO cannot be use in parallel with SCCM (like "Do not connect to any Windows Update Internet locations")

Do you now if this is possible and how can I configure this ?

[syparon]

I've found a solution to my problem, I just configured the GPO settings below :

- Configure Automatic Updates : DISABLED

- Do not connect to any Windows Update Internet locations : ENABLED --> this allow us to prevent user from manually scanning update from the Internet.

We disabled all other settings, because combination of some GPO settings can make the WSUS scan on machines unable to work (ISusInternal:: DisconnectCall failed, hr=8024000C  and more precisely error 0x8024500c)

 

Hope it could help someone else ...