Microsoft previously held the line on their aggressive pushing of Windows 10 to previous versions of the operating system at leaving domain-joined computers alone. They are now crossing that line and expanding the ‘Get Windows 10’ program to prompt domain-joined computers that run Windows 7 Professional or Windows 8.1 Professional and receive their updates directly from the Windows Update service (rather than a WSUS server).This information was shared on the Windows for IT Pros TechNet blog in an article titled Making it Easier for Small Businesses to Upgrade to Windows 10.
This means that computers running Enterprise versions of Windows or use WSUS will not receive this update push, for now. Along with the announcement of this changed policy, Microsoft also published KB3080351, which provides instructions on preventing the ‘Get Windows 10 (GWX)’ app from running. With updates installed (KB3065987 for Win7, KB3065988 for Win8.1), you can use the updated Windows Updates Administrative Template WindowsUpdate.admx. You then enable the ‘Turn off the upgrade to the latest version of Windows through Windows Update’ setting under Computer Config, Admin Templates, Windows Components, Windows Update.
Alternatively, you can manage the setting through the Registry by setting the Registry entry:
Subkey: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
DWORD value: DisableOSUpgrade = 1
You can hide the GWX notification app in the system tray with this Registry entry:
Subkey: HKLM\Software\Policies\Microsoft\Windows\Gwx
DWORD value: DisableGwx = 1
Notifications will start rolling out to qualifying computers in the US later this month. If you wish to manage the experience in your environment, be sure to get the settings in place sooner rather than later.