How to enable Windows Update over the internet for domain computers? (Code: 8024402C)

In Windows 7/Vista right below the managed by system administrator message is a link you can click that allows you to search for updates from Windows Updates.

The settings are specified via the GPO wish is most likely implemented by your corporate IT department. The only way to overridden this is to change the GPO directly, however this will get overridden the next time you connect to the corporate network.

The easiest way would be to request to be removed from the Windows Update group. However if you want to override it manually this article will give you the registry keys to edit to change it. You can also do it through the Local Policy Editor by following these instructions.


I maintain many machines in a domain environment. There are additional keys that may have to be modified to enable updates when disabled by policy.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
        "UseWUServer"=dword:00000000

and

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoWindowsUpdate+=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
    "UseWUServer"=dword:00000000
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess=dword:00000000 
"DisableWindowsUpdateAccessMode=dword:00000000 

I saved the keys before changing and named it "DisableUpdates". I then made the changes to parameters listed above and saved it as "EnableUpdates" and saved it to a USBDrive. Double click the saved regkey of my choice, then StopStart the windows update service. I now have an easy way of granular updating my users computers with Windows Update on a case by case basis. Sweet!