Just a quick "FYI" - I just discovered this on a client's domain.

When the Group Policy setting Computer Configuration-->Administrative Templates-->Windows Components-->Window Update-->Configure Automatic Updates is set to "Enabled", you can change the Windows Auto Update setting in Kaseya to "Disabled" (and "disabled is indicated from here on out), but Automatic Updates is never turned off on the client machine.

Also, once the restrictive policy is removed and another patch scan run, Kaseya still reports Windows Auto Update options as disabled, even though they may not be.

I did submit a bug report to Kaseya about this.


Legacy Forum Name: A warning about Group Policy and Kaseya Patch Management,
Legacy Posted By Username: nateg