Reset Windows Update GPO Settings

by | Last updated 2022.10.29 | Published on 2021.06.24 | Guides, WSUS

If you want to Reset the Windows Update GPO Settings because you are moving away from WSUS, or you need to for troubleshooting purposes (sometimes corruption in the registry permissions prevent expected changes from happening), the easiest way to do this is to remove the entire Registry Key:
HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate
Doing this will force Windows to use the defaults and re-build this key using group policy (or local group policy).

From an Administrative PowerShell Prompt on the affected client

Remove-Item 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate' -Force -Recurse
gpupdate /force
Restart-Service -name "Windows Update"

One thing to note is by unlinking an existing WSUS GPO, or just deleting it, or just setting the values back to “Not Configured” is NOT going to remove the entries from the registry. These registry keys don’t change and don’t remove by just stopping the policy from applying. You COULD set the WSUS Server Location GPO to Disabled, wait for GPO propagation and then set it to “Not Configured”, but with all of the systems that are not receiving GPO updates at the time you change it (remote users, offline systems, etc), it’s entirely possible that you’ll have some system that will only apply the latest state of ‘Not Configured’ leaving them with the registry entries configuring the system to go to WSUS.

RemoteApp and Desktop Connections

RemoteApp and Desktop Connections

How Do I Add RemoteApp Connections? Ever get sick of trying to find the right way of mass-adding a RemoteApp connection feed to a large amount of computers? There are a few ways: manually (YUCK!), and automatically using a GPO: User Configuration > Policies >...

WSUS Permissions – WsusContent, Registry, and IIS

WSUS Permissions – WsusContent, Registry, and IIS

If you Google WSUS Permissions, you may end up getting a boatload of links to support help on TechNet, Spiceworks, ExpertsExchange, Microsoft Docs, or other blogs around the Internet. Most of the links are only for specific parts - maybe the WsusContent folder, maybe...