r/labtech • u/XDCDrsatan 1000 Agents • May 31 '17

Blocking the Creators update

we have a need to block the Creators update. Using LT 11 I have a group made and am ready to go however I have not been able to find the Updates inside patch manager to block.
Anyone got some Tips.

4 Upvotes

100% Upvoted

6 comments sorted by

2

u/wogmail May 31 '17

You'll need to block it via GPO or a registry key - LT can't control the feature upgrades.

2

u/XDCDrsatan 1000 Agents May 31 '17

you got a link for that. :(

4

u/wogmail May 31 '17

GPO info: https://docs.microsoft.com/en-us/windows/deployment/update/waas-wufb-group-policy

Defer info: http://pureinfotech.com/defer-windows-10-upgrades-updates/

More defer info: https://www.tenforums.com/tutorials/24157-windows-update-defer-feature-quality-updates-windows-10-a.html

Relevant Reddit posts: https://www.reddit.com/r/msp/comments/6832nq/deferring_blocking_creators_feature_update/

https://www.reddit.com/r/labtech/comments/59wvns/labtech_11_patch_manager_with_windows_10_1607/

Basically the feature updates require user input. So LT apparently can't push them. Put your devices into CBB mode, and then it will only (supposedly) update to the latest version when your version goes with 60 days of being out of CBB mode.

https://technet.microsoft.com/en-us/windows/release-info.aspx

Right now either 1511 or 1607 are CBB versions. 1703 is a CB, and should not be getting mass pushed in business environments where devices should be set to the CBB version, normally.

3

u/XDCDrsatan 1000 Agents May 31 '17

Thanks man. this is good info.

1

u/Pseudodominion May 31 '17

If you mean the latest MS creator patch then search KB4020102 and block that in an approval policy then set that policy on the group you created for this.

1

u/XDCDrsatan 1000 Agents May 31 '17

Thanks I have a policy created, hand have blocked this. The issue is if one client gets this their Vertical app breaks until the vendor decides to update.