This question is subtly different from other questions I've found on Serverfault about how best to configure Windows Updates by GPO for Win10 machines on an AD Domain.
I'm running Server 2016, domain from scratch (i.e. latest Win10 Admin Templates for GPO), with Windows 10 clients (1703 - creators update).
I'm generally happy with the Windows Updates settings for workstations, aside from the below problem.
Non-administrator users logged onto Win10 PCs are receiving a blue notification on screen "Updates are available", and they are given the option to "View Updates" and nothing else. Users click on this button, it opens Windows Updates settings screen. It says "Updates are ready to install" and there's an "install now" button. Users are able to click this button.
I don't want this to happen, and I don't want users to be interrupted by the intrusive blue bar, which takes focus from the user and forces them to click the "View Updates" button.
I've made the following settings already in Group Policy:
- Allow automatic updates immediate installation > enabled
- Allow non-administrators to receive update notifications > disabled
- Turn off auto-restart during active hours > enabled 8am-5pm
I want to prevent this "View Updates" bar from showing on the screen, as it interrupts non-administrator users. The users on this network should not interact with Windows Update at all, and updates should be seamless.