Prohibit removal of updates

This policy setting controls the ability for users or administrators to remove Windows Installer based updates. This policy setting should be used if you need to maintain a tight control over updates. One example is a lockdown environment where you want to ensure that updates once installed cannot be removed by users or administrators. If you enable this policy setting updates cannot be removed from the computer by a user or an administrator. The Windows Installer can still remove an update that is no longer applicable to the product. If you disable or do not configure this policy setting a user can remove an update from the computer only if the user has been granted privileges to remove the update. This can depend on whether the user is an administrator whether “Disable Windows Installer” and “Always install with elevated privileges” policy settings are set and whether the update was installed in a per-user managed per-user unmanaged or per-machine context. “

Additional Information

  1. Registry path is:

    HKEY_LOCAL_MACHINE -> Software -> Policies -> Microsoft -> Windows -> Installer # DisablePatchUninstall

  2. The Administrative Template path is:

    Windows Components -> Windows Installer


* Making mistakes while changing registry values can affect your system adversely. We recommend you to create a System Restore point before making registry manipulation. If you're new to Registry Editor, read this beginner's guide.
** To locate the registry and administrative template path, checkout beginner's guide.
You're here :
Checkout Kapil Sparks™