Windows update is disabled by policy for user

Symptoms

For computers that are running Microsoft Windows XP

You may experience one or more of the following symptoms:

• When you access the Windows Update Web site or the Microsoft Update Web site, you receive an error message that is similar to the following:

  Access Denied
  Network policy settings prevent you from using Windows Update to download and install updates on your computer. If you believe you have received this message in error, please check with your system administrator.

• When you click Windows Update or Microsoft Update on the Start menu, you receive an error message that is similar to the following:

  Windows Update was disabled by your system administrator.

• The Windows Update shortcut or Microsoft Update shortcut is missing on the Start menu.

• The Windows Update shortcut or Microsoft Update shortcut is missing on the Tools menu in Microsoft Internet Explorer.

• The Automatic Updates tab is missing in the System Properties dialog box.

• After you configure Automatic Updates, you are not notified about critical updates. Additionally, you do not receive critical updates from Windows Update or from Microsoft Update.

• Device Manager does not automatically install driver updates from Windows Update or from Microsoft Update.

• When you click the Automatic Updates Control Panel tool, the Automatic Updates settings are unavailable. You receive a message that is similar to the following:

  The Windows Update Service is unavailable.

Cause

This issue occurs if Windows Update is turned off by one of the following settings:

• Group Policy

• System policy

• Registry

Resolution

For corporate users who are connected to a corporate network

To resolve this issue, contact the local system administrator to determine whether Windows Update access is disabled by Group Policy settings.

For home users who are not connected to a corporate network

To restore the missing Windows Update shortcut or Microsoft Update shortcut on a computer that is running Windows XP, follow these steps:

1. Log on to the computer as a local administrator.

2. Click Start, click Run, type gpedit.msc, and then click OK.

3. In the left pane, expand User Configuration, expand Administrative Templates, and then click Start Menu and Taskbar.

4. In the right pane, right-click Remove links and access to Windows Update, and then click Properties.

5. Click Disabled, click Apply, and then click OK.

To enable access to the Windows Update Web site, follow these steps:

1. Log on to the computer as a local administrator.

2. Click Start, click Run, type gpedit.msc, and then click OK.

3. In the left pane, expand User Configuration, and then expand Administrative Templates.

4. Expand Windows Components, and then click Windows Update.

5. In the right pane, right-click Remove access to use all Windows Update Features, and then click Properties.

6. Click Disabled, click Apply, and then click OK.

More Information

Windows XP Professional supports the Remove links and access to Windows Update Group Policy setting. On other Windows operating systems, you can use System policies, or you can modify the registry.

An administrator can use these policies to remove access to Windows Update and to Microsoft Update for individual users, for domain users, or for Active Directory objects.

For more information about how to troubleshoot Windows Update issues and Microsoft Update issues, click the following article number to view the article in the Microsoft Knowledge Base:

316524 You receive an «Administrators only» error message when you try to visit the Windows Update Web site or the Microsoft Update Web site

Содержание

• Способ 1: Сброс настроек в твикерах
• Способ 2: Проверка политики автообновления
• Способ 3: Проверка службы обновления
• Способ 4: Проверка реестра
• Способ 5: Откат к точке восстановления
• Вопросы и ответы

Причиной появления этого сообщения является изменение некоторых настроек Windows 10, в частности, связанных с обновлениями и безопасностью. Причем изменения эти могли быть внесены как непосредственно администратором, так и с помощью специальных программ-твикеров.

Способ 1: Сброс настроек в твикерах

В Windows 10 программы-твикеры обычно применяются для тонкой настройки операционной системы, а также для отключения следящих функций. Пользоваться такими инструментами нужно с осторожностью, в противном случае можно нарушить работу компонентов системы. Если вы использовали подобные утилиты, восстановите измененные ими настройки — благо, большинство твикеров позволяют отменять изменения. Например, в популярном твикере OOSU10 для этого нужно выбрать опцию «Отменить все изменения» на одноименной вкладке.

Способ 2: Проверка политики автообновления

Уведомление «Ваша организация отключила автоматические обновления» появится, если пользователь или администратор отключил автоматическое обновление системы в локальных групповых политиках.

1. Откройте нажатием Win + R окошко быстрого выполнения команд, введите в него команду gpedit.msc и нажмите клавишу ввода.



2. Запустится «Редактор локальных групповых политик». Перейдите в нем по цепочке «Конфигурация компьютера» → «Административные шаблоны» → «Компоненты Windows» → «Центр обновления Windows» и отыщите в правой колонке политику «Настройка автоматического обновления».



3. Если политика имеет статус «Включена», откройте двойным кликом ее свойства и выставьте для нее значение «Не задана» или «Отключена».

Сохраните настройки и перезагрузите компьютер.

Способ 3: Проверка службы обновления

Проверьте состояние службы, отвечающей за получение обновлений Windows. Она должна быть активной.

1. Откройте оснастку управления службами, для чего в диалоговом окошке Win + R выполните команду services.msc.



2. Отыщите в списке служб службу «Центр обновления Windows» и убедитесь, что она выполняется и имеет тип запуска «Автоматически» или «Вручную».



3. В противном случае откройте «Свойства» службы двойным кликом и попробуйте ее запустить нажатием одноименной кнопки, изменив тип запуска на «Автоматически» или «Вручную».



4. Аналогичным образом найдите в списке службу «Фоновая интеллектуальная служба передачи (BITS)» и запустите ее, если не запущена. Тип запуска этой службы выставьте «Автоматически».

Способ 4: Проверка реестра

Для отключения автоматического обновления администраторы нередко применяют твик реестра. Проверьте указанный ниже ключ на предмет внесенных в него изменений.

1. Откройте «Редактор реестра» командой regedit в диалоговом окошке «Выполнить», вызванном нажатием комбинации клавиш Win + R.



2. Разверните в левой колонке ключ HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU и удалите из последнего подраздела все параметры. Это восстановит настройки обновления по умолчанию.





3. Перезагрузите компьютер.

Способ 5: Откат к точке восстановления

Если вы не нашли подходящего решения, выполните откат Windows 10 к ближайшей точке восстановления. Эта операция восстанавливает некоторые системные файлы и реестр, а вместе с ним и измененные настройки, которые могли привести к появлению уведомления «Ваша организация отключила автоматические обновления».

Подробнее: Откат к точке восстановления в Windows 10

Еще статьи по данной теме:

Помогла ли Вам статья?

17 Dec, 22


by Oliver K



5 min Read

Данная установка запрещена политикой, заданной системным администратором

При попытке установить программу из MSI пакета на рабочей станции (права администратора имеются) возникает ошибка «Данная установка запрещена политикой, заданной системным администратором». Проверили – ни какой другой MSI файл также не запускается. Что делать?

Ответ

Сообщение «Данная установка запрещена политикой, заданной системным администратором» (The system administrator has set policies to prevent this installation) может появляться как во время запуска exe файлов, так и при установке MSI пакетов. Даже, если ограничения не настраивались специально, в некоторых случаях Windows или какая-т другая программа могла самостоятельно изменить параметры политики Software Restriction Policies (SRP). Вот что можно предпринять в таком случае:

Временное отключение UAC

Возможной причиной проблемы с установкой приложения может быть политики UAC. Попробуйте установить приложение при отключенном UAC (напомню, что отключение UAC это не рекомендуемый шаг, и после тестирования его нужно включить обратно).

Если это не помогло избавиться от уведомления, то попробуйте отключить политику блокировки, блокирующего выполнение MSI пакетов установщиком Windows через редактор локальной групповой политики или реестр.

Служба Windows Installer

Откройте консоль управления службами (services.msc) и убедитесь, что служба Windows Installer (Установщик Windows) присутствует в системе и запущена (если нет, запустите службу).

Групповая политика отключения установщика Windows

Откройте командную строку и выполните gpupdate /force.

Ключ реестра DisableMSI

Если вы используете операционную систему Windows редакции Home, то редактор локальной групповой политики в ней не будет доступен. Внести все необходимые изменения можно через реестр. Для этого:

После проделанных действий обязательно перезагрузите компьютер и запустите установку нужной программы. Ошибка больше не будет появляться.

Если решить проблему не получилось, попробуйте создать новую папку внутри Program Files или Windows, скопировать в нее дистрибутив и запустите его с правами администратора.

Источник

question

I have a problem in our domain with Microsoft Store. When we’re trying to install anything, it gives the following error message:

This install is prevented by policy. Ask your admin to enable Windows Update. Code: 0x8024500C

In the domain we’re using a central system to install updates (like WSUS), but we have an OU in our AD, where WSUS is disabled with these group policy settings:
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Updates:

Do not connect to any Windows Update Internet locations: Disabled

Specify intranet Microsoft update service location: Disabled

With these settings, Windows Update works, I can download and install Windows updates manually, if the computer account is in this OU, but Microsoft Store still gives the above error message.

It happens on every Windows 10 computers, with all versions we have from 1809 to 20H2.

Are there any other group policy settings which are disabling Microsoft Store, even if Windows Update is enabled?

Thank you in advance,

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.

5 Answers

I would ask the experts at the dedicated Microsoft Store for Windows 10 forum over here:
https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_store

(If the reply was helpful please don’t forget to upvote or accept as answer, thank you)

Thank you for your answer! I’ve already posted this question on the Community Site, but there I was suggested to raise the question here, as it’s connected with WSUS and AD group policy settings.

Hi,
If you want to check the group policies, i would recommend you run command with administrator: gpresult /h report.html.
All the policies for the users you logged on and the computer will be listed in the result.
Check if any settings related to the update.
Best Regards,

Quest for OP, were you able to get to resolution on this question.

We also have GPO to prevent users from download updates from MS, but this blocks App Installs from MS Store. How did you workaround this issue?

Hi,
Unfortunately no, it’s still not working on our domain computers.

At my company we are using both WSUS/SCCM and Windows Update For Business to patch our systems. Intermittently, some clients on WSUS/SCCM were reporting this error in the Store. And I struggled with this issue for some time. My solution (workaround) was to temporarily switch the affected computers from using WSUS to using regular Windows Update / Windows Update For Business. The moment I did that, Windows updates and Store updates and apps started installing. Made sure that everything was up to date and then I switched the PC’s back to using WSUS/SCCM and everything was still ok. It’s like the Store was not able to reach Microsoft or something like that, which you would normally point to a proxy or firewall issue. But maybe it was just not reading the GPO settings correctly.. Guess I’ll never find out.

Hi,
Unfortunately it does not work. This was my first idea too, and I’ve created a GPO where Windows Update is enabled. On the computers in this OU Windows Update works fine, but Store still does not.

For our case both Windows Update and the Store were not working when this happened. Recently we fixed other computers using this method. Don’t have any other ideas though for your case.. :/

adrianr-0135, your solution, «My solution (workaround) was to temporarily switch the affected computers from using WSUS to using regular Windows Update / Windows Update For Business». Could you tell me how you did this? Through putting the device in a new GPO, or turned it off on the local machine?

Источник

question

This install is prevented by policy. Ask your admin to enable Windows Update. Microsoft store Windows 10 Enterprise 1903

When i try to install any app from Microsoft store on my Window s10 1903 Enterprise i get this error :

This install is prevented by policy. Ask your admin to enable Windows Update.

Hey i found a setting that allowed me to fix the problem

Do Windowskey-R then type gpedit.msc and then ok

go to computer Configuration > Administrative Templates > Windows Components > Windows Update >

then there should be an option thats ON saying: «do not connect to windows udate internet locations»
when you turn this OFF it should fix the Update issue and start downloading in the store

It works, thank you bro

2 Answers

You could try to do the following steps:

Select Windows Store Apps and run the troubleshooter.

If you enable the following group policy setting you will end up with the error.

The above should be set to Not Configured

This policy shows up in the registry under the following key.

Deleting the DoNotConnectToWindowsUpdateInternetLocations in the registry does not resolve the issue but changing it in group policy may helps.

You could try the method above.

Microsoft should review how this is working because this gpo setting is also used to prevent the users from using the «Check online for updates from Microsoft Update» in Windows Update.

So basically, if you allow the Store to download apps, you allow the user to bypass WSUS/SCCM patching because this gpo is the only way to hide the feature. in Windows Update..

Источник

This install is prevented by policy ask your admin to enable windows update

Вопрос

I have users that are getting the following message when try to do the actual install of a Windows Store app. They can browse fine, just not install. I cannot for the life of me figure out which particular GPO that is causing the issue.

Ответы

I found the culprit.

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update Do not connect to any Windows Update Internet locations

Somehow this was set to enabled on these particular devices, even though the setting is not set in GPO anywhere.

Все ответы

I found the culprit.

Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update Do not connect to any Windows Update Internet locations

Somehow this was set to enabled on these particular devices, even though the setting is not set in GPO anywhere.

We could control Windows Update settings by using Group Policy.

You can find policy under Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update.

For this issue, it is related to the setting below:

The above should be set to Not Configured

This policy shows up in the registry under the following key.

Glad to hear that you have found a solution and thank you for sharing it here, it will be helpful to other community members who have same questions.

Источник

Fix: The System Administrator Has Set Policies to Prevent This Installation

Installing a program shouldn’t be a difficult thing to follow through but sometimes it’s been made impossible by errors similar to this one. This particular error occurs when the users is trying to install a program on their PC and the message goes like:

The System Administrator Has Set Policies to Prevent This Installation

Sometimes there is an error code displayed as well which should help users research the cause of this error. The error is not a dangerous one and it can be fixed by implementing some of the methods which you can see below. The methods are quite easy to follow through so make sure you try out each one.

Solution 1: Simply Try Running the Setup File as an Administrator

This fix is definitely the simplest one and the reason why it’s included is because it has definitely worked in several occasions. So, before trying the more complicated fixes, make sure that you have tried this one out and saved yourself a couple of hours.

Solution 2: A Simple Registry Fix

The first method on our list has been declared as quite a successful one so that is the reason why you should first try this one out. The method includes editing the registry which can be somewhat dangerous if you are not sure what you are doing or if you accidentally edit the wrong key.

Follow the instructions displayed in this article in order to safely backup your registry so that you can fix the potential damage if it occurs.

Solution 3: Turn of User Account Control (UAC) and Try Installing Your Program

Since Windows can sometimes overreact with their security warnings and messages, you can turn them off for a short period of time needed for you to install the program you are struggling with. You should undo these changes as soon as you are done with the process since the last thing you want to do is leave your computer unprotected.

Solution 4: Use the Hidden Administrator Account

Even though you are probably the administrator on your PC, this error message might implicate that you are not actually the real admin. This is a bug and it can be fixed for the particular program if you use the “hidden” administrator account which can be unlocked by several commands in Command Prompt.

net user administrator /active:yes

net user administrator /active:no

Solution 5: Use the Group Policy Editor

This error is explained in a way which tells us there may be something wrong with the Local Security Policy and it needs to be edited. You can safely edit these settings by following the instructions below and navigating to the settings which needs to be changed.

Источник

If you received Windows Update is disabled message in your Windows 10, then here is how to fix the problem.