Although Windows Update and WSUS are both generally pretty simple to configure, you can sometimes gain a higher level of control over them by making a few minor modifications to the Windows registry.In this article, I will show you some registry keys that are associated with Windows Update.Now that I’ve gotten the standard disclaimer out of the way, there is one more thing that I need to tell you before I get started.
One of the problems with receiving updates from a WSUS server is that users are not allowed to approve or disapprove of updates unless they are a member of the local administrators group.
However, you can use the registry to give users an elevation of privileges that will allow them to approve or disapprove of updates regardless of whether or not they are a local administrator.
You can apply the tweaks to individual machines directly, or you can apply modifications as a part of a login script.
Also, some of the keys that I am going to be talking about may not exist by default.
On the flip side, you could also deny end users the ability to approve updates, reserving that right for Admins.