Turn off Automatic Root Certificates Update

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

This policy setting specifies whether to automatically update root certificates using the Windows Update website. Typically, a certificate is used when you use a secure website or when you send and receive secure email. Anyone can issue certificates, but to have transactions that are as secure as possible, certificates must be issued by a trusted certificate authority (CA). Microsoft has included a list in Windows XP and other products of companies and organizations that it considers trusted authorities. If you enable this policy setting, when you are presented with a certificate issued by an untrusted root authority, your computer will not contact the Windows Update website to see if Microsoft has added the CA to its list of trusted authorities. If you disable or do not configure this policy setting, your computer will contact the Windows Update website.

This policy has no additional user input fields.

• Computer
  Turn off access to all Windows Update features

  At least Windows Server 2003 operating systems, Windows XP Professional Service Pack 1, or Windows 2000 Service Pack 3
• User
  Turn off access to the Store

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Turn off access to the Store

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Turn off downloading of print drivers over HTTP

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• User
  Turn off downloading of print drivers over HTTP

  At least Windows XP Professional with SP2
• Computer
  Turn off Event Viewer "Events.asp" links

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• Computer
  Turn off Help and Support Center "Did you know?" content

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• Computer
  Turn off Help and Support Center Microsoft Knowledge Base search

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• User
  Turn off Help Experience Improvement Program

  At least Windows Vista
• User
  Turn off Help Ratings

  At least Windows Vista
• Computer
  Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
• User
  Turn off Internet download for Web publishing and online ordering wizards

  At least Windows Server 2003 operating systems or Windows XP Professional with SP2