Remove win10 upgrade option through group policy with .bat script

[gordoclimbs]

So I found a thread by "Brink" that suggests removing the option to upgrade your OS (therefore remove the pesky win10 prompts) from the group policy editor. This is only available on win 7 pro. I work with many small networks literally over 1500 individual machines sub divided into hundreds of networks. I want to keep all these machines on win7 pro. So I'm wondering since this group policy editor change is so simple and effective can I script a .bat file deploy it out to all my machines and have the users run it once to make the change then its done. Otherwise I'm going to have to remote into each machine and do it manually or send out a word based doc. with screen shots on how to do it to my users. Much appreciate any help in advance.. Gordo

 

[Brds7t7]

Hi Gordo, I don't know if there is any way of creating a batch file to change Group policies, somebody may be able to correct me on that though.
However, you could create a batch file using the below entries to remove all Windows 10 related updates and use that on each system. Then keep those updates hidden perhaps?
Here are the updates I would consider Windows 10 related, but you may want to google each one and see which ones you think are worth removing/keeping? The Windows update client updates seem to be updated every month though, so you may need to keep an eye on that each month.

wusa /uninstall /kb:2952664 /quiet /norestart
wusa /uninstall /kb:2990214 /quiet /norestart
wusa /uninstall /kb:3021917 /quiet /norestart
wusa /uninstall /kb:3022345 /quiet /norestart
wusa /uninstall /kb:3035583 /quiet /norestart
wusa /uninstall /kb:3050265 /quiet /norestart
wusa /uninstall /kb:3065987 /quiet /norestart
wusa /uninstall /kb:3068708 /quiet /norestart
wusa /uninstall /kb:3075249 /quiet /norestart
wusa /uninstall /kb:3075851 /quiet /norestart
wusa /uninstall /kb:3080149 /quiet /norestart
wusa /uninstall /kb:3083324 /quiet /norestart
wusa /uninstall /kb:3083710 /quiet /norestart
wusa /uninstall /kb:3102810 /quiet /norestart
wusa /uninstall /kb:3112343 /quiet /norestart

 

[gordoclimbs]

Hi Brds7t7, thanks I think that you are correct that this method would be a temp fix and that it possibly would require monthly maintenance as they are really pushing win10 on users. However I am thinking more of a simple long term fix. I guess I also wasn't exactly clear earlier either.

What I ment is that when one makes the change through Group Policy it changes one registry key and I'd like to write a .bat to make that reg. change instead.

HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E40E0910-88C2-4920-A10E-DFE6B595998F}Machine\Software\Policies\Microsoft\Windows\WindowsUpdate\DisableOSUpgrade this is the key that is changed.

I have also found that this other key essentially does the same thing it is just stored in another part of the registry
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\windowsUpdate\DisableOSUpgrade


I think this should be possible I am just a manual regedit kinda guy... thanks Gordo

 

[Brds7t7]

Hi Gordo,

From what I've been reading and some reports on here just changing the registry entry doesn't always stick after some Windows updates. Some people have reported even though they have set it, after another Windows update client update it's been reset and it's started downloading the 10 upgrade files.

I personally haven't experienced this happen myself though. At least not yet anyway. 10 is getting nowhere near my system!

 

[gordoclimbs]

Hey Brds7t7,

I really hope that does not happen, first I work with lots of machines in the hospitality industry we sell POS systems for retail, restaurants and bars and none of our software solutions work with win10 so its really bad when one of our clients unknowingly upgrades as everything breaks and can bring their whole system down. Its pretty inconsiderate of MS to not consider our needs and that for lots of industry using win7 they will never want to upgrade to 10. Hopefully there is light at the end of the tunnel as MS is only offering win10 free until July of 2016 so hopefully the intrusion into our systems will stop at that time. I have done the registry changes on a few of our most recent builds and also uninstalled and hid updates related to win10 on others and will continuously monitor them to see which ones take and keep everyone posted. Thanks Gordo

 

[BorisTheAnimal]

Hi Gordo,

I found this thread on the Super User forum and I would recommend looking at user Opmet's answer though others might also work:

How to disable the "Get Windows 10" icon shown in the notification area (tray)? - Super User

Cheers Boris