It appears to be a reproducible bug introduced in 1709*.
To get rid of this Some settings are managed by your organization message on the Windows Update page of Settings, do the following:
1) Copy/paste the following as something like wu_bug-remove.reg. (The name doesn't really matter.):
Code:
Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
Alternatively, download this wu_bug-remove.reg file: wu_bug-remove.reg
2. Double-click on the .REG file and accept the User Account Control prompt to allow changes.
3. Click on the Yes button in the next dialog which asks if you want to continue then on the OK button of the next dialog to dismiss the confirmation.
4. Close and re-open the Settings app.
5. In Settings, open the Update & Security section and select the Windows Update page. Note that you may still see the Some settings are managed by your organization message at this point (due to what appears to be a reproducible bug in reading the registry).
6. Click on the Check for updates button. The message should disappear within a second of starting the check.
Hope this helps...
*******************************************************
*TL ; DR
It took me several days of testing with Win 10 Home and Pro but I can now trigger it and remove it at will in Pro (Home is not affected). The weird thing is, it appears to be triggered by the (mis-)reading of a combination of policy settings, hence why it never shows in Local Group Policy Editor as one or more Enabled (configured) settings under Windows Update.
If you want to demonstrate the bug yourself just do the following:
1. Copy/paste the following as something like trigger_bug.reg:
(or download this trigger_bug.reg file: wu_bug-trigger.reg)
Code:
Windows Registry Editor Version 5.00
; Trigger WU bug - note that the DWORD setting for 'AUOptions' is equivalent to 'Auto download and notify for install'
; This is a default setting
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
2. Import the .REG file.
3. Close and re-open the Settings app at the Update & Security section and select the Windows Update page. If you don't yet see the Some settings are managed by your organization message then click on the Check for updates button. The message should appear within a second of starting the check (unless an update is downloading, e.g. a Windows Defender definition update. In this case, just wait for the download to finish.)
Note that this does NOT trigger the bug:
Code:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
But this does:
Code:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003