Check registry entries from CAWUM
Initial situation
As soon as a client is listed as “Managed by WUM” in Windows Update Management, ACMP automatically sets the required registry items on the respective system. In doing so, existing items that were previously set are generally overwritten, so that they no longer affect the update process. If problems do occur, however, it is recommended that you manually check the relevant registry items.
Procedure
Open Registry Paths
- First, make sure that the affected Clients are listed under the “Managed by WUM” tab and are actually managed via ACMP.
- Next, open the Registry Editor by pressing the Win key + R and entering regedit.
- Navigate to the relevant registry paths to check the set values. As soon as a client is managed via CAWUM, the corresponding registry keys should be present automatically.
View of the opend Registry Editor
List of Registry Entries
| Registrykey | Description |
|---|---|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] | |
| "WUServer"="https://127.0.0.1:8530" | Defines the Windows Update server from which the client obtains updates. For CAWUM, this value refers to the local ACMP update service. |
| "WUStatusServer"="https://127.0.0.1:8530" | Specifies the server to which the client sends status and acknowledgment data regarding installed updates. This is also the local CAWUM service. |
| "UpdateServiceUrlAlternate"="https://127.0.0.1:8530 | Alternative Update Service URL. Ensures that Windows Update uses only the CAWUM service. |
| "DisableDualScan"=dword:00000001 | Disables Dual Scan. Prevents Windows from finding Windows Updates simultaneously through Microsoft Update and an internal Update Server. |
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] | |
| "NoAutoUpdate"=dword:00000001 | Disables Windows' automatic search for updates and Update installation. |
| "NoAUShutdownOption"=dword:00000001 | Removes the “Install Updates and shut down” option from the Windows shutdown menu. |
| "AUOptions"=dword:00000002 | Sets the update behavior. A value of 2 means: Updates are reported but not automatically installed. |
| "UseWUServer"=dword:00000001 | Forces the use of the Update Server (CAWUM) defined under WUServer instead of Microsoft Update. |
| "NoAutoRebootWithLoggedOnUsers"=dword:00000001 | Prevents automatic restarts after Updates as long as a user is logged in to the system. |
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Office\16.0\Common\OfficeUpdate | |
| OfficeMgmtCOM=1 | Transfers Office update management to a central management tool—in this case, ACMP.
This key excludes Office updates and includes Windows Updates! The key applies to Microsoft 365 apps and/or Office 2019/2021 (Click-to-Run). |
Note: Note on the Fullness of Registry Entries
The registry entries listed in the table represent the key registry keys used by ACMP / CAWUM for Windows Update Management and Office Update Management.
This is not a full list of all registry keys set or affected by ACMP.
In addition, there are numerous other custom Windows registry keys that are not actively managed by ACMP and are therefore not included in this table.
Customize Active GPO Settings
If there are still active GPOs that affect the registry values mentioned above or set different settings in the path
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
these GPOs must be disabled or customized.
Here is a simple method to determine this:
1. First, exit the ACMP Client service.
2. Next, delete the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
3. Then, in an elevated Command Prompt, execute the command
gpupdate /force.
4. Next, check whether the registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
has been created again.
- If the key is created again, the configuration originates from one or more active GPOs. In this case, please identify the relevant GPOs and disable or correct them.
- If the key is not recreated, there is no GPO influence. In this case, restart the ACMP Client service.
5. Next, delete the local Windows Update cache and execute a Windows Update scan again via ACMP.
6. Finally, restart the ACMP Client service to fully enable update management.