• Add a REG_DWORD value named DoNotConnectToWindowsUpdateInternetLocations to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate and set the value to 1.

  -and-

• Add a REG_DWORD value named DisableWindowsUpdateAccess to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate and set the value to 1.

  -and-

• Add a REG_SZ value named WUServer to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate and ensure it is blank with a space character " ".

  -and-

• Add a REG_SZ value named WUStatusServer to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate and ensure it is blank with a space character " ".

  -and-

• Add a REG_SZ value named UpdateServiceUrlAlternate to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate and ensure it is blank with a space character " ".

  -and-

• Add a REG_DWORD value named UseWUServer to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU and set the value to 1.

-OR-

• Set the Group Policy Computer Configuration > Administrative Templates > Windows Components > Windows Update > Do not connect to any Windows Update Internet locations to Enabled

  -and-

• Set the Group Policy Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings > Turn off access to all Windows Update features to Enabled

  -and-

• Set the Group Policy Computer Configuration > Administrative Templates > Windows Components > Windows Update > Specify intranet Microsoft update service location to Enabled and ensure all Option settings (Intranet Update Service, Intranet Statistics Server, Alternate Download Server) are set to " "

  -and-

• Set the Group Policy User Configuration > Administrative Templates > Windows Components > Windows Update > Remove access to use all Windows Update features to Enabled and then set Computer Configurations to 0 (zero).