A company has client computers that run Windows 8 in a kiosk environment.
You need to ensure that Windows updates are automatically applied and cannot be
disabled by users.
What should you do?
A.
Configure Windows Update to install updates automatically.
B.
In the local Group Policy, enable the Turn on recommended updates via Automatic
Updates policy setting.
C.
msiexec /i app1.msi /qn
D.
In the local Group Policy, configure the Remove access to use all Windows Update
features policy setting.
Explanation:
http://technet.microsoft.com/en-us/library/cc775792%28v=ws.10%29.aspx
Turn off access to all Windows Update features:
This Group Policy setting is located in Computer Configuration\Administrative
Templates\System\Internet Communication Management\Internet Communication settings.
When you enable this setting, the operating system cannot be updated through Windows
Update, and Automatic Updates is disabled. Users or administrators can still perform actions
such as clicking the Windows Update option on the Start menu, and the Windows Update
Web site will appear in the browser.
However, it will not be possible to update the operating system through Windows Update,
regardless of the type of account being used to log on.
I think that is exactly what we want to happen in a kiosk environment.
Kiosk Computers will still be able to receive their updates from a WSUS server.
Wouldnt it be B?
The question isnt what do you think would be the best option for a Kiosk Enviroment…..
B does the specific job specified in the question
???????
Yes – the answer is B – by setting the value in the local policy, it cannot be changed by any user interface, therefore preventing the users from disabling automatic updates.
“When you enable this setting, the operating system cannot be updated through Windows
Update, and Automatic Updates is disabled.” says so on the explanation…so you expect the admin to manually either physicall or remotely connect to the client PCs and perform updates…not very efficient way.
The only answer that makes sense is A, although it only activate the recommended updates…you also need to enable Configure Automatic Updates!
In the local Group Policy, enable the Turn on recommended updates via Automatic
Updates policy setting
I found this as an explanation:
Turn off access to all Windows Update features:
This Group Policy setting is located in Computer ConfigurationAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settings. When you enable this setting, the operating system cannot be updated through Windows Update, and Automatic Updates is disabled. Users or administrators can still perform actions such as clicking the Windows Update option on the Start menu, and the Windows Update Web site will appear in the browser. However, it will not be possible to update the operating system through Windows Update, regardless of the type of account being used to log on. I think that is exactly what we want to happen in a kiosk environment. Kiosk Computers will still be able to receive their updates from a WSUS server.
Correction, sorry… This should be the right option:
D: In the local Group Policy, configure the Remove access to use all Windows Update
features policy setting.
I found this as an explanation:
Turn off access to all Windows Update features:
This Group Policy setting is located in Computer ConfigurationAdministrative TemplatesSystemInternet Communication ManagementInternet Communication settings. When you enable this setting, the operating system cannot be updated through Windows Update, and Automatic Updates is disabled. Users or administrators can still perform actions such as clicking the Windows Update option on the Start menu, and the Windows Update Web site will appear in the browser. However, it will not be possible to update the operating system through Windows Update, regardless of the type of account being used to log on. I think that is exactly what we want to happen in a kiosk environment. Kiosk Computers will still be able to receive their updates from a WSUS server.