Disable waptwua

guigeek · April 25, 2025 - 11:43

Hello,
I have a script that runs when the network connection changes and checks if the connection is local or not.
If it's local, it changes the WAPT configuration, disabling the `waptwua` field so the PC can access the internet to perform updates.

This all worked fine before version 2.6.0.171177, but since then, when I disable the `waptwua` field, it's still impossible to run Windows updates.

Is this normal? Is it a new feature or a bug?

Thank you for your feedback,
Guillaume

guigeek · May 14, 2025 - 08:57

Anyone?

Can anyone at least tell me which registry entries need to be changed so that PCs can update directly from Microsoft?
Thanks

May 14, 2025 - 12:26

Hello,
Set the following four keys to 0:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DisableWindowsUpdateAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\SetDisableUXWUAccess
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotConnectToWindowsUpdateInternetLocations

Run gpupdate /force
Restart the “Windows Update” service

Have a good day,
Bertrand

guigeek · May 14, 2025 - 1:21 PM

Thanks! I tried that, I can access the update button, but then I get an error as if the update service is unavailable:

"We couldn't connect to the update service. We'll try again later, or you can check now. If it still doesn't work, make sure you're connected to the internet."

I must be missing something for it to work because the PC has internet access.

jlepiquet · May 14, 2025 - 1:57 PM

Hello,

could you try applying this package?
tis-clean-softwaredistribution

guigeek · May 14, 2025 - 2:24 PM

THANKS !
but no better

jlepiquet wrote: ↑May 14, 2025 - 1:57 PM Hello,

Could you try applying this package?
tis-clean-softwaredistribution

jlepiquet · May 14, 2025 - 3:01 PM

"Restart the Windows Server 10 (WU) service.
In the command prompt (CMD), run:
`wuauclt /resetauthorization /detectnow /reportnow`.
`USOclient refreshsettings`
run
scan. Then refresh and retry in the Windows Server 10 settings pane."

I found this on a forum. The three commands are independent.

guigeek · May 14, 2025 - 4:29 PM

Thanks, but it still doesn't work

guigeek · May 21, 2025 - 08:29

Hello,
is there anyone from WAPT who might have a working procedure?
Thank you.

May 21, 2025 - 09:55

Hello,

when waptwua is enabled, it configures the registry keys here:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

and at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate

and disables the Windows Update service.

Therefore, when waptwua is disabled, the process is reversed.

If the key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\SetDisableUXWUAccess = 1 and waptwua is "disabled",

then delete the keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
and HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

, and then restart the Windows Update service.

Normally, in your use case, I would strongly recommend using secondary download rules.

You can tell the computer to use http://download.windowsupdate.com/micro ... /wsusscan/ with a secondary download rule.