The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →To stop users on managed Windows devices from scanning for, downloading, or installing updates through Windows Update settings, deploy the Microsoft policy Update/SetDisableUXWUAccess. Its display name is “Remove access to use all Windows Update features,” and setting it to 1 enables the restriction. Setting it to 0, the default disabled state, leaves user access in place.
This guide explains what the policy does, where it fits in Intune, how to configure it, and which update controls it does not replace.
As an Amazon Associate I earn from qualifying purchases.
What the policy identifies
The policy is documented in Microsoft’s Update Policy CSP reference under the name Update/SetDisableUXWUAccess. Use that name when searching the CSP reference, reviewing an existing profile, or comparing your configuration with Microsoft’s documentation.
- Setting name: Update/SetDisableUXWUAccess
- Display name: Remove access to use all Windows Update features
- Scope: Device. The policy applies to the device, not to an individual user sign-in.
- Applicability: The CSP table lists Windows 10 version 1809 and later. Confirm this against the current table before you assign the policy, because support ranges change between Windows releases.
- Values: Integer. 0 is the default disabled state. 1 enables the setting and removes user access.
Microsoft describes the effect as removing the user’s ability to scan for, download, or install updates from Windows Update settings. That is the full scope of the policy as documented. It is a user access control, not a servicing schedule.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
How it fits into Intune
Microsoft supports configuring Windows Update client policies through Intune or another MDM solution by using CSP policies. Intune’s Windows update settings reference also lists SetDisableUXWUAccess as the option that controls whether users can check for Windows updates. Microsoft’s documentation confirms the connection between the two, but it does not give one stable admin-center path for this setting, and console labels change over time. Two routes are practical:
- If your tenant’s Settings catalog or update-related profile view exposes the setting, select it there and set the value to 1.
- If it is not exposed, create a custom profile with an OMA-URI setting, as described below.
Configure the policy with a custom OMA-URI setting
Use this route when the setting is not available as a built-in control in your console. The OMA-URI path follows the CSP name; check it against the Update Policy CSP reference before deploying.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
- In the Intune admin center, create a new configuration profile for the Windows 10 and later platform, using the custom profile type.
- Add an OMA-URI setting with these values:
- Name: Remove access to use all Windows Update features
- OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Update/SetDisableUXWUAccess
- Data type: Integer
- Value: 1
- Assign the profile to a device group. Because the policy is device scoped, assign it to devices rather than to users.
- Test on a pilot group first. On a pilot device, open Windows Update settings and confirm that the user can no longer check for, download, or install updates from that screen. Allow time for the policy to reach the device after sync.
- To reverse the change, set the value to 0 or remove the profile from the assignment group.
Three update controls that are easy to confuse
Restricting user access to Windows Update does not change how the device is serviced. Microsoft’s documentation treats three different mechanisms separately, and they should not be used as substitutes for one another.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Control | What it governs | Microsoft reference |
|---|---|---|
| User access to Windows Update features | Whether the user can scan, download, or install updates from Windows Update settings (Update/SetDisableUXWUAccess) | Update Policy CSP |
| Automatic servicing behavior | How and when the device scans, downloads, and installs updates, including update rings and deferrals configured through Windows Update for Business | Windows Update for Business and CSP guidance |
| Feature update version targeting | Which Windows release the device is directed to, through an Intune feature update policy | Intune feature update policy guidance |
Device-type guidance for these policies is also published in Microsoft’s configuration guidance by device type, which is worth checking if your fleet mixes editions or device categories.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
What the policy does not do
Enabling the setting does not stop the device from receiving updates. Administrator-managed servicing continues under the update ring, deferral, and feature update policies already assigned to the device. If you want a device to stay on a particular Windows release, use a feature update policy. If you want to control timing, use update ring settings. The user access setting only removes the user’s ability to take those actions from the Windows Update screen.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Checks before you deploy
- Confirm that your Windows releases fall within the applicability listed in the current Update Policy CSP table. Devices older than Windows 10 version 1809 are outside the documented range.
- Review existing update rings and feature update policies so the new restriction does not conflict with the servicing behavior you intend.
- Pilot the profile on a small group, and confirm the expected result on a device before expanding the assignment.
- Record the value you deployed, and keep a rollback path (value 0 or unassignment) documented for your support team.
Microsoft notes that policy applicability and admin-center labels can change, so verify the CSP table and console labels on the day you deploy.
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Sources: Update Policy CSP, Intune Windows update settings, Windows Update for Business and MDM guidance, Intune feature update policies.
Quick Recap
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
