windows 7 updates starting in clones but disabled in parent

[sjesse]

Hi

Has anyone else noticed this, all my instant clones have windows updates started, but its disabled in the parent. I also have no GPOs on the OU where these are located.

[BenFB]

I've seen this before and we had to apply GPO to the linked clones to disable Windows Update. A workaround would be to disable the Windows Update services on the parent VM which should persist to the linked clones.

[sjesse]

That is what is crazy its disabled in the parent, something is setting it to manual. I disabled the windows component service, which is used for installing windows updates and optional components, and that seemed to fix my problem. I noted we had trusted installer running like crazy, even though windows updates i disabled, and all previous updates have been applied. I also have the gpo set as well, but it won't disable, it just stays at manual.

[BenFB]

I vaguely remember this and recall we were able to overcome it but that was many years ago when I worked at a different company. We leave Windows updates enabled in my current environment. Ideally you are refresh/compose the VMs regularly so it shouldn't be an issue for updates to run but I'd recommend pointing them to WSUS/SCCM where you can control what is deployed.