Detections
Analytics

104.5 Ensure 'Block 'Pause Updates' ability' is set to 'Block'

Information

This policy removes access to 'Pause updates' feature.

The recommended state for this setting is: Block.

In order to ensure security and system updates are applied, system administrators should control when updates are applied to systems.

Solution

To establish the recommended configuration via GP, set the following UI path to Block :

Windows Update For Business\Block 'Pause Updates' ability

Impact:

Users will not be able to select the 'Pause updates' option in Windows Update to prevent updates from being installed on a system.

See Also

https://workbench.cisecurity.org/benchmarks/27282

Item Details

Category: RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|RA-5, 800-53|SI-2, 800-53|SI-2(2), CSCv7|3.4

Plugin: Windows

Control ID: 9d0aeb3e1d5665bb98b39a5ddb832321759549181ae8ca5f3bc28f4154328ef1