Skip to main content

Windows Update Registry Information

This document will cover information for Windows Update regarding Registry Entries - This will cover Configuration, Troubleshooting, and other diagnostic and administrative information

Registry Key Locations​

GPO and Kaseya Managed Registry Keys

HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

Intune Patching Registry Keys

HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update

GPO Cached Registry Keys for Windows Updates (and Other GPOs)

HKLM:\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\GPCache

Registry Key Meanings​

HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

Key EntryKey TypeMeaning
WUServerREG_SZWSUS Specific Contains the HTTP(s) URL of the WSUS Server used by Automatic Updates
WUStatusServerREG_SZWSUS Specific HTTP(s) URL of the WSUS Statistics Server (usually same as WUServer)
Target GroupREG_SZWSUS Specific Name of the target group used for WSUS
Target Group EnabledREG_DWORDWSUS Specific Set to 1 for Client-Side Targeting or 0 to Disable
DisableOSUpgradeREG_DWORDPrevents the machine from offering OS Version Upgrades via Windows Update
TargetReleaseVersionREG_DWORDSet to 1 to force device to target a specific Windows Release Version
TargetReleaseVersion InfoREG_SZThe target Windows Version String for Target Release Version (i.e. '24H2')

HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

Key EntryKey TypeMeaning
UseWUServerREG_DWORDSet to 1 to configure system to use WSUS Server instead of Windows Updates
NoAutoUpdatesREG_DWORDSet to 1 to disable automatic updates or 0 to enable automatic updates
AUOptionsREG_DWORDConfigures how Updates are Downloaded and Installed
1 - Keep my computer up to date is disabled in Automatic Updates
2 - Notify of Download and Installation
3 - Automatic Download and Notify of Installation
4 - Automatic Download and Schedule Installation
7 - Notify for Install and Notify for Restart
NoAutoRebootWithLoggedOnUsersREG_DWORDSetting for Auto Reboot Options if a user is logged on
1 - Prevents Automatic Restarts if a user is logged on
0 - Notifies the logged on user of a 5-minute Restart Countdown

HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update

⚠️ These values are all set by Intune MDM and should not be changed locally as they will get overwritten