GPO - Windows Update w/ SUS

[jnalpak]

I have sus enabled for the firm but i dont want users going near windows update on their machines by clicking on windows update or going through IE and choosing windows update...

If i "enabled" the polucy under userconfig/admin/windows componen/windows update/ REMOVE ACCESS TO USE ALL WINDOWS UPDATE FEATURES

will this stop SUS from updating the users box or just stop them from hitting the windows update page?

[jnalpak]

answered my own questionwith a simple google:

In addition, the User Configuration portion of the Windows Update settings (located in the User Configuration->Administrative Templates->Windows Components->Windows Update folder) contains a single entry "Remove access to use all Windows Update features." Once enabled, it prevents logged-on users from obtaining Windows Updates via any user-initiated methods (such as manual downloads from the Windows Update Web site, manual installations of already downloaded updates, or driver updates via Device Manager if they originate from the Windows Update Web site).

This will, however, still allow you to use the scheduled automatic Windows Update (corresponding to the third option in the group policy). Similar results are achieved when the "Remove links and access to Windows Update from User Configuration->Administrative Templates->Start Menu and Taskbar folder are enabled. We will explain the distinction between these two settings when we discuss Software Update Services in greater detail.