GPO instead of fix-disable-windows-update

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Answer
jlatieule
Messages: 59
Registration: July 3, 2019 - 9:18 AM

June 6, 2024 - 4:39 PM

Good morning,


I am currently testing fix-disable-windows-update
Because I am not alone in the team and IT service companies can intervene on our domain, I prefer to rebuild it explicitly in GPO so that it is usable by everyone.
We had a GPO that configured Windows Update. Although it's disabled, I have the impression that the GPO settings that have already been deployed to the workstations are interfering with WAPTua

I am opening this thread so that the work can be reused by other administrators of Windows systems using an Active Directory.

To begin, I've noticed that uninstalling doesn't restore all the registry keys modified during installation. I assume that what is restored is what's essential.

Services
I identified 4 services to disable
  • dosvc: Delivery Optimization => GPO / Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization
  • waasmedicsvc: Windows Update Medic Service => GPO / Location not found
  • unosvc: Orchestrator Service for updates => GPO / Location not found
  • uhssvc: Microsoft Update Health Service => GPO / Location not found
Upon uninstallation of the package, the following services are reactivated. "Microsoft Update Health Service" is missing and will not be automatically reactivated
  • dosvc: Delivery optimization
  • waasmedicsvc: Windows Update Medic Service
  • unosvc: Orchestrator Service for updates
Before going any further.
Why is uhssvc not reactivated?
Regarding the three locations not found in GPO, do you know if they exist or should I plan to modify registry keys?

Sincerely
System and Network Administrator at Domitia Habitat
Answer