Win 10: DISABLE "device installation settings" via registry or GP ?

Discussion in 'Windows 10' started by DavidinCT, Aug 13, 2016.

  1. DavidinCT

    DavidinCT MDL Addicted

    May 9, 2015
    536
    101
    30
    #21 DavidinCT, Aug 13, 2016
    Last edited: Aug 13, 2016
    (OP)
  2. Leporello

    Leporello MDL Novice

    Sep 20, 2010
    39
    12
    0
    Didn't you read my post here: (canot link yet) it is Nr. 17 !!!
     
  3. DavidinCT

    DavidinCT MDL Addicted

    May 9, 2015
    536
    101
    30
    I did go through that one by one and it does not look like it will do what I need. Even the "Allow administrators to override Device installation Restriction policies" does not list any information on Windows update.

    Allow installation of devices that match these device setup classes seems like it could do something if it was in reverse... I will look into this a little deeper to see if SOMETHING can be done here.

    I will look into it a little deeper but, it does not look like a solid option here but, again, thanks.
     
  4. damianfox

    damianfox MDL Senior Member

    Jan 23, 2011
    423
    310
    10
    #25 damianfox, Aug 13, 2016
    Last edited by a moderator: Apr 20, 2017
    Yes same here.

    OP you can do what I do, Disable Windows Update service, Then when a Cumulative update comes out go back set to Manual install the CU from a .msu file then after you restart set it back to Disabled.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Leporello

    Leporello MDL Novice

    Sep 20, 2010
    39
    12
    0

    It does exactly what you want. However, you have to know the Drivers ID you want to block.

    I did it by myself. The former Win10 Version loaded a Keyboard Driver I didn't like. And I blocked it in that way I mentioned.

    In the latest version it was no more necessary. They changed something. Thus, you can keep your desired Version of Drivers.

    Anyway, the way i described is still working.
     
  6. Mr.X

    Mr.X MDL Guru

    Jul 14, 2013
    8,554
    15,642
    270
    Description:
    Red text makes sense to me. I think is worth to try.
     
  7. DavidinCT

    DavidinCT MDL Addicted

    May 9, 2015
    536
    101
    30
    I did...and I am going to do some testing. I read someplace else that it didn't work on Pro, just Enterprise but, if people are saying it DOES work, I surely will give a try and put in a test area for about 2 weeks before deploying it.

    It seems, as I posed this subject in a few places, Microsoft does not want the customer/end user to have control of this any more and "officially" they only offer a temp work-around (install bad driver, roll back and block that one but, if newer comes out later it will update it).

    WTF is up with Microsoft now days, They want 100% control of everything on your PC and limit what you can do now. All in all, it is starting to really look like Windows 7 is the ultimate OS from Microsoft, as it seems 10 is starting to go down hill.

    Sorry didn't mean to vent... Thanks for the advice, I will no question try this....Crossing fingers that it does work and Microsoft does not break it later.
     
  8. Imkruzen

    Imkruzen MDL Member

    Jan 9, 2011
    209
    330
    10
    I was looking for the same, to disable the driver updates and found thisin gpedit:
    Computer Configuration/Administrative Templates/Windows Components\Windows Update - Do Not Include drivers with Windows Updates
     
  9. Leporello

    Leporello MDL Novice

    Sep 20, 2010
    39
    12
    0
    Then,you won"t get ANY Driver updates anymore for any devices. Not very good Idea.
    Better: Define exactly the Device you like to be UNtouched by updates. I described how to do.
     
  10. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,467
    92,585
    340
    "Do Not Include.." policy is not even working

    some people really know how to get drivers themselves :)
     
  11. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,274
    1,193
    60
    Actually that is what you want in a corporate environment, because any update can break system, any not just driver, windows update as well.
    Windows updates should be disabled and installed using patch management after they have been proven to be stable, not just hoping for luck.
     
  12. Leporello

    Leporello MDL Novice

    Sep 20, 2010
    39
    12
    0
    That might be. But the question of the OP went in an other direction. He just wants to prevent the automatic Installation of a new driver for a specific Device.

    Exactly that can be done following my proposal. And it works. I did it by myself.
     
  13. Engineer2k2

    Engineer2k2 MDL Member

    Jun 21, 2012
    242
    40
    10
    Yes ! your suggestion is worth.:clap:
     
  14. Imkruzen

    Imkruzen MDL Member

    Jan 9, 2011
    209
    330
    10
    Okay, that's exactly what I wanted. Thks. for confirming.
     
  15. murphy78

    murphy78 MDL DISM Enthusiast

    Nov 18, 2012
    7,432
    11,762
    240
    #37 murphy78, Aug 15, 2016
    Last edited by a moderator: Apr 20, 2017
    I have a script for that, but it should be noted that WU ties automatic driver downloads to when it checks for updates.
    It will also install them only when it also installs updates.
    So what I'm saying is that you should either install with the internet disabled until you run this script, or reg edit via hive load/unload on a mounted image to make sure the setting is always in place.

    Anyhow my script is as follows:

    Drivers-Auto-Update-Enable_Disable-Win10.cmd
    Code:
    @echo off
    
    
    title Disable/Enable Windows 10 Automatic Device Driver Updates
    color 1f
    :Begin UAC check and Auto-Elevate Permissions
    :-------------------------------------
    REM  --> Check for permissions
    >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
    
    
    REM --> If error flag set, we do not have admin.
    if '%errorlevel%' NEQ '0' (
    echo:
    echo   Requesting Administrative Privileges...
    echo   Press YES in UAC Prompt to Continue
    echo:
    
    
        goto UACPrompt
    ) else ( goto gotAdmin )
    
    
    :UACPrompt
        echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
        echo UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%temp%\getadmin.vbs"
    
    
        "%temp%\getadmin.vbs"
        exit /B
    
    
    :gotAdmin
        if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
        pushd "%CD%"
        CD /D "%~dp0"
    :--------------------------------------
    
    
    :Check Windows Version
    wmic os get version | find /i "10.">nul 2>nul
    if %errorlevel% neq 0 GOTO :Not10
    
    
    :Check the key:
    (reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig"|find /i "0x0")>NUL 2>NUL
    if %errorlevel% neq 0 GOTO :KEYOFF
    
    
    :KEYON
    echo ============================================================
    echo Device Driver Automatic Updates are currently disabled.
    echo Would you like to re-enable them? (Y/N)
    echo ============================================================
    echo.
    choice /c yn /n
    If %ERRORLEVEL% NEQ 1 GOTO :QUIT
    
    
    echo Attempting to shut down the Windows Update service if it's running
    net stop wuauserv>NUL 2>NUL
    echo.
    
    
    Echo Changing Registry key
    REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /D 1 /T REG_DWORD /F>NUL 2>NUL
    IF %ERRORLEVEL% NEQ 0 GOTO :ERROR
    Echo.
    
    
    Echo Device Driver Automatic Updates have been enabled
    Echo.
    goto :QUIT
    
    
    
    
    :KEYOFF
    echo ============================================================
    echo Device Driver Automatic Updates are currently enabled.
    echo Would you like to disable them? (Y/N)
    echo ============================================================
    echo.
    choice /c yn /n
    If %ERRORLEVEL% NEQ 1 GOTO :QUIT
    
    
    echo Attempting to shut down the Windows Update service if it's running
    net stop wuauserv>NUL 2>NUL
    echo.
    
    
    Echo Changing Registry key
    REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /D 0 /T REG_DWORD /F>NUL 2>NUL
    IF %ERRORLEVEL% NEQ 0 GOTO :ERROR
    Echo.
    
    
    Echo Driver Automatic Updates have been disabled
    Echo.
    goto :QUIT
    
    
    
    
    :QUIT
    echo ============================================================
    echo Press any key to exit...
    echo ============================================================
    pause>NUL
    goto :EOF
    
    
    :ERROR
    echo ============================================================
    echo The script ran into an unexpected error setting reg key.
    echo Press any key to exit...
    echo ============================================================
    pause>NUL
    goto :EOF
    
    
    :Not10
    echo ============================================================
    echo This script is only designed for Windows 10...
    echo Press any key to exit...
    echo ============================================================
    pause>NUL
    goto :EOF
     
  16. Super Spartan

    Super Spartan MDL Expert

    May 30, 2014
    1,766
    1,018
    60
    no registry hack or group policy edit ever works ever since the first build of Windows 10 was out. It's all or nothing, youo cannot disable driver updates even though the option is there, it just doesn't work. Screw you Micro$h4ft
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. Leporello

    Leporello MDL Novice

    Sep 20, 2010
    39
    12
    0
    Your info is WRONG.

    I prevented the installation of a newer keyboard driver using Group Editor like described above by me. It worked perfectly.
    I wanted to keep all driver updates but exclude just the desired specific one.
    Additionally, after the 1607 Upgrade the rollback driver function seems also to block renewing and overwriting the wanted driver again. If you don't like to rely on that you can change the GP successfully, even on PRO Version.