Does Windows Restore Hidden Updates After Joining Domain?

NoelDP said:

That depends on the Group Policy imposed by the network administrators - they have the ability to push updates whether you want them or not.
Perhaps you need to solve whatever is peculiar about your system that is causing the crashes, rather than just blaming windows updates?

I did conclusively link it to a certain update, as removing the update suddenly caused it to stop. It took a while to figure that much out, but I'll check the group policy settings to try and resolve this. That's pretty much what I was trying to find out though, so thank you.

There's no official network administrator here, but me and my supervisor have those duties. I am going to look through Group Policy for the right settings.

NoelDP said:

I still think it's more likely to be a problem with your system. What troubleshooting have you done?

These are brand new PCs. I just installed and activated them today. It was after updating SP1 and running Windows Update again. Eventually there were 10 left after about 2 runs of updates.

I'm not there at the moment, so I cannot give you a ton of information.

Here's what I can say from memory alone. The BSOD happened after running the last set of updates after I was able to get most of them done I had 10 left to install. I typically make a system image immediately after running updates, so I had an image from right before installing the last 10 updates. I installed the last 10, then made another. I then tried defragmented my HDD and the BSOD happened during that. My first thought was it would be that program, (Auslogics Disk Defrag) so I tried setting up web browsers instead.

In the process I got a second and third BSOD. After that I restored to the image before the last 10 updates, set up the web browsers, made another system image, then installed one update at a time, and after about 45 minutes to an hour, I was able to determine which one it was and hid the update so that it will not install on its own.

I finished everything but connecting to the domain and had no issues. My concern is that connecting to the domain will override the local hidden update setting, install that update and cause random Blue Screens. Also we have a special login system for the public which if they do not log out manually and the PC crashes they cannot log back in unless someone goes into the database and resets their login status, so not having random crashes is critical here.

NoelDP said:

Which update appears to be causing the problem?
Were these installations from images, or the manufacturer's setup?

The Windows installations were done through an image of one completed system, without the problematic update. All the PCs are the same model, hardware, etc.

I'll have to check when I'm back in the office tomorrow what update it is. I just found out we do not use WSUS for updates and it says the settings are locked by the system administrator, so I will try to convince them to let me setup WSUS and that should resolve it.

On the other hand, while I have my solution, would you still like me to find what update it is?