How to block Windows Update to a scheduled time

Yes, you create a firewall at the top of your list that blocks/allows the MS updates at the time you permit them.

ian

Okay, but how can the rule block MS updates? With a Web policy?
Thank you for your reply.

Hi,

You can use App Control to block ms update.

Simple build 2 Rules: one which matches at the time (top) with blocked windows update and another (anytime) with no app control rule.

Should work. 

Hi ManBearPig,

I will try your solution, thank you.

Hi,

I cloned the Lan to Wan rule above, then I added the app control and a shceduled time on the rule, the rule is well used but the download of Windows updates is not blocked. (On Windows 2012 R2).

Screenshot of my rules : 

Rule 7 : 

Application Control Policy :

Hi,

my reading of that rule is it will allow downloads during work hours. What sites does your report show as being passed? The site classification might not be correct because not all MS sites are  classified. One complaint is that MS keeps adding new sites (URLs).

Ian

Hi,

As per my thinking, First you should disable windows update exception from web policy then apply schedule rule as you want.

It should work.

BR,

Shoukat Ali

Hello Thomas, here is a suggestion. Create a firewall rule for windows updates and set your desired time schedule.

Then Schedule your windows machine with a time within the time of the schedule rule. So for example set firewall rule time for 2:00 am to 4:00 am. Set windows machine to update within those times. not sure if this is a solution to your problem.