Some settings are managed by your organisation

dalchina said:

Suggestion 2 I found fixed 'Some settings are managed by your organisation..' on Windows update Settings dialogues.

Suggestions found:
1. Go to "Settings" -> "Privacy" -> "Feedback & diagnostics" -> "Diagnostics and usage data"; if it is set to "Basic", change it to "Enhanced" or higher, and the message disappears.

(Didn't work for me)

2. This solved it for me:

It appears to me that you installed some miscellaneous "Telemetry Blocker" software/tweak which is why you're finding options blocked from configuration.

This is typically done through "Group Policy".
Press [WinKey] + [R] and type gpedit.msc

In the window that appears, follow "Computer Configuration" then "Administrative Tempates" finally right click "All Settings

Select "Filter Options"

"Change the drop down for "Configured" to "Yes". Untick the check boxes if any are ticked."

Press OK

I found setting Managed, Configured, Commented - all to 'Any' removed the message.

Dalchina, I have the exact same problem as you showed in your screenshot. However, for me #1 didn't work because "Diagnostics and usage data" is set to "Basics" and greyed out so I can't change it.
#2 There is no "All Settings" and hence no "Filter Options" under "Computer Configuration/Administrative Templates"
I'm running Windows 10 64-bit version.

TairikuOkami said:

You can try run CMD as admin and enter this. It will also reset Insider settings.
Note, that it will remove all policies and settings you might have applied, like UAC.

reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f
reg delete "HKCU\Software\Microsoft\WindowsSelfHost" /f
reg delete "HKCU\Software\Policies" /f
reg delete "HKLM\Software\Microsoft\Policies" /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f
reg delete "HKLM\Software\Microsoft\WindowsSelfHost" /f
reg delete "HKLM\Software\Policies" /f
reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f
reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f
reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f

Hi, some of them have access denied. Is this right? Even after doing all this, I am unable to turn off Real-time protection

genoxide said:

Hi, some of them have access denied. Is this right? Even after doing all this, I am unable to turn off Real-time protection

Real-time protection is about Windows Defender, not Windows Update.

Access denied is because there are two registry hives involved - HKEY_CURRENT_USER (abbreviated to HKCU) and the system-wide HKEY_LOCAL_MACHINE (abbreviated to HKLM) - with different permissions.

Double-clicking on a REG file 'runs' it in the user context of the logged-on user. However, system-wide changes to HKLM needs regedit.exe (the Registry Editor) or reg.exe (the commandline equivalent) to be run as elevated, i.e. using Run as administrator.

In addition, there are a few Windows Update entries in the registry that are owned by the TrustedInstaller special account so need permissions more elevated than logged-on users in the Administrators group or the (disabled by default) Administrator account.

(Microsoft is gradually increasing the number of these special Windows Update registry entries in a whack-a-mole attempt to thwart third party utilities like Windows Update Blocker (WUB). Note that using WUB also results in Some settings are managed by your organisation notifications.)

Whilst the ownership by TrustedInstaller of these special and most-privileged registry entries can be changed, IMO it's better (and much easier) to leave the ownership as it is and, instead, use a third-party utility like PowerRun, AdvancedRun or NSudo to run regedit.exe or reg.exe in the context of the resource's owner rather than changing ownership.

Hope this helps...