DisablePatch

HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer

Data type Range Default value
REG_DWORD 0 | 1 0

Description

Prevents users from using Windows Installer to install patches.

Patches are updates or upgrades that replace only those program files that have changed. Because patches can be easy vehicles for malicious programs, some installations prohibit their use.

This entry stores the setting of the Disable patching Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the Disable patching policy. If you disable the policy, Group Policy sets the value to 0. If you set the policy to Not configured, Group Policy deletes the entry from the registry and the system behaves as though the value is 0.

Value Meaning
0 (or not in registry) The policy is disabled or not configured. Users can use Windows Installer to install patches.
1 The policy is enabled. Users cannot use Windows Installer to install patches.

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Disable patching policy (Computer Configuration\Administrative Templates\Windows Components\Windows Installer).

Note Image Note

This entry applies only to installations that run in the user's security context. By default, users who are not system administrators cannot apply patches to installations that run with elevated system privileges, such as those offered on the desktop or in Add/Remove Programs.

Tip Image Tip

For detailed information about particular Group Policy settings, see the Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion CD.

For general information about Group Policy, see Group Policy in Windows 2000 Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Reference Table.

Related Entries

Page Image