Hi,
We have SCCM setup which push the updates to user PC but when user are click on windows update button its download and install feature updates.
I would like to create two policy.
1. To block of windows updates for every user in domain but allow some user (Through security group) to run Windows Update online.
2. Block Feature updates for every user within the domain.
How can i setup these two policy to achive this.