Problem:
Need to disable Windows Updates.
Need to enable Windows Updates.
Solution:
The settings for Windows Automatic Updates can be changed using the custom definition settings in LANDesk Security Suite. The steps below show the steps required to Disable Windows Automatic Updates.
1. Launch the Security and Patch Manger window.
2. Select "Security Threats" from the "Type" drop down menu located on the toolbar.
3. Right click on "Custom Groups" and select the option to create a new group. Give the new group a name such as "Security Threats" and save it.
4. Double Click on the ST000003 vulnerability to bring up the Properties window.
5. Click on the "Custom Variables" tab. Click on the "Value" drop down menu and select the desired option. For this example choose the "Turn Off" option. Click "Apply".
6. Highlight the "ST000003" vulnerability from the list of vulnerabilites in the scan folder and drag it to the custom group that was created in step 3.
7. Create a new scan and repair setting and give it a name such as "Security Threats".
8. Click on the scan tab and select the "Group" option. Browse to the custom security threat group that you created in step 3.
9. Select the option to "Immediately repair all detected items".
10. Make any other modifications (such as reboot options) to the Scan and Repair settings and click the "OK" button.
11. Launch a new security scan. Give the task a name such as "Disable Windows Update".
12. Select the task type of scheduled task or policy.
13. Select the Scan and Repair setting that was created in step 7 from the "Scan and Repair settings" drop down menu. Click the "OK" button to create the task.
14. Drag the clients you want to run this machine into the task and select a start time.
Please note that that there are multiple methods that one could use to disable the Windows Automatic Updates with LANDesk. The method provided in this article will create a task that scan specifically for the ST000003 vulnerability instead of scanning for all of the security threat vulnerabilities that are located in the Security Suite Scan folder. This will result in a faster scan and repair.