Contributed By: Mike Cook [MSFT]
This can be set via Local Computer Policy even if you are not in AD. User config-> Admin templates-> Windows Components-> Windows Update

Contributed By: Torgeir Bakken [MVP]

To use GPO, you will have to have AD.

Without AD, you can set the registry value "NoWindowsUpdate" to 1 (type REG_DWORD) in the following key to disable Windows Update (but not SUS) for all users of the computer:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

To do this remotely, there are several options:

A) Reg.exe - Reg.exe comes built in with WinXP and Win2k3.

Reg.exe for Win2k is in the Support Tools found on the Win2k CD, \Support\Tools\Suptools.msi, or for the latest version of Support Tools (should work on non-SP4 computers as well):

http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/supporttools.asp

Run "REG ADD /?" in a command prompt for more help.


B) VBScript/WMI

See "Create String and DWORD Values" here:

http://www.microsoft.com/technet/community/scriptcenter/registry/default.mspx