Documentation · Policy appendix
Windows Update
Every setting of the “Windows Update” package with its effect, value and recommending sources.
since 0.9.8.11
Purpose
This page lists every setting of the “Windows Update” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.
4 settings.
Notes
Configure Automatic Updates
This computer-scoped Group Policy setting controls how Windows scans for, downloads, and installs available updates. The listed values are components of the same policy and use the REG_DWORD data type.
- Technical:
- Policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions = 4 (REG_DWORD)
- Policy:
- Switch in the app: Policies › Windows Update
- In detail: Configure Automatic Updates
- Source: Microsoft Learn: Manage additional Windows Update settings
- Recommended by: ACSC/ASD: Hardening Microsoft Windows 11 workstations
Download Mode
This machine-wide REG_DWORD value determines which sources Windows Delivery Optimization may use to obtain supported content for Microsoft products. Depending on the value, Delivery Optimization can use the original HTTP source, Microsoft Connected Cache, and/or peer devices.
- Technical:
- Policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization\DODownloadMode = 1 (REG_DWORD)
- Policy:
- Switch in the app: Policies › Windows Update
- In detail: Download Mode
- Source: Microsoft Learn: Policy CSP – DeliveryOptimization (
DODownloadMode) - Recommended by: Setup Foundry
Disable pre-release features or settings
EnableExperimentation is a DWORD option formerly used by the Windows Group Policy setting “Disable pre-release features or settings.” Within that policy, a value of 0 selected the level at which Microsoft could configure device settings only as part of product experimentation. It did not select full experimentation involving user settings.
- Technical:
- Policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds\EnableExperimentation = 0 (REG_DWORD)
- Policy:
- Switch in the app: Policies › Windows Update
- In detail: Disable pre-release features or settings
- Source: Microsoft Learn: Policy CSP – System – AllowExperimentation
- Recommended by: Setup Foundry
Toggle user control over Insider builds
This REG_DWORD value controls whether users can enroll the device for Windows Insider Preview builds through Windows Settings.
- Technical:
- Policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds\AllowBuildPreview = 0 (REG_DWORD)
- Policy:
- Switch in the app: Policies › Windows Update
- In detail: Toggle user control over Insider builds
- Source: Microsoft Learn: System Policy CSP – AllowBuildPreview
- Recommended by: Setup Foundry