This message was deleted.

Any reason for running WSUS on non-persistent desktops? That sounds a bit counter productive?

well maybe thats a better way to approach this. so with our non persistent/app layering setup we obviously only want updates to be deployed to the base image right (or OS layer in our case). I have local policies in the image set to disable automatic updates) and disabled the windows update service but windows 10 keeps finding ways to turn it back on so our first thought was ok lets throw all the non persistent desktops in a WSUS group that has no approved updates so even if it TRIES to look it wont get anything and we're good. but like i said it seems to ignore that and look out to the internet too. is there something we're missing for really ensuring these mcs desktops dont do that? (we use user layer too so really dont want those updates pulling down )

Check the "Windows Update Medic Service", I have it disabled, it likes to re-enable the windows update service. Once I disabled that my machines stopped updating.

alright so it looks like that set to manual startup type (currently stopped). so do you set the windows update service to disabled in your image (even though it will try and turn it back on ) and also that update media service to disabled and thats all you did?

That's what finally fixed it for me, disabling the medic service.

damn dude if that fixes it you are my hero! haha

Possibly, we don't use the MS store, so I'm not sure what effect it has on that.

i'll have to test a bit here but thank you for chiming in! if that fixes my update issue i'll be thrilled! friggin microsoft and that whiteboard app limitations.....promote it as a huge Teams addition but dont let admins centrally push it out

That's right, I had to do it via registry. I'll find the key.

i think i just found that one too here but thank you! so you disabled both services and for you they have stayed stopped/disabled on non persistent desktops? i guess that would solve one of my problems but introduces the next w/ the damn Store

Yeah, no more unwanted updates.

well damn isnt this some irony.....been trying to get update service to stay disabled/block updates on these machines for months and may have the solution and one blasted store app that i'm told is "essential" means i can't even implement it

😞

thank you anyways

Can you get the MSI for this app from the systems folder and deploy it that way?

well i know this app is ONLY available via the Store app so would this be possible? do store app save a msi after install??