Microsoft Office
Enterprise
ESM Security Setting - Office Automatic Update Policy
Description: This policy setting controls whether the Office automatic updates are enabled or disabled for all Office products installed via Click-to-Run. This policy has no effect on Office products installed via Windows Installer. If you enable or do not configure this policy setting, Office periodically checks for updates. When updates are detected, Office downloads and applies them in the background. If you disable this policy setting, Office won't check for updates.
Why It's Important: This setting helps keep Office apps secure and up to date by automatically applying the latest patches, bug fixes, and feature improvements. It reduces the risk of vulnerabilities caused by outdated software and ensures users always have the most stable version. It’s like having your car serviced automatically—keeping everything running smoothly without needing to remember to do it yourself.
Learn More
ESM Security Setting - Office Update Options Policy
Description: This policy setting allows you to hide the user interface (UI) options to enable or disable Office automatic updates from users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer. If you enable this policy setting, the Enable Update and Disable Updates options in the UI are hidden from users. If you disable or do not configure this policy setting, the Enable Update and Disable Updates options are visible, and users can enable or disable Office automatic updates from the UI.
Why It's Important: This setting helps ensure that update control stays in the hands of IT administrators, not end users. By hiding the update toggle in Office apps, users can’t accidentally disable updates or delay important security patches. It’s like removing the “off switch” from a security system—so it always stays active and protected. This helps maintain consistency, reduces risk, and ensures that Office stays up to date across all devices.
Learn More
Privileged
PSM Security Setting - Automatic Updates Policy
Description: This policy setting controls whether the Office automatic updates are enabled or disabled for all Office products installed via Click-to-Run. This policy has no effect on Office products installed via Windows Installer. If you enable or do not configure this policy setting, Office periodically checks for updates. When updates are detected, Office downloads and applies them in the background. If you disable this policy setting, Office won't check for updates.
Why It's Important: This policy ensures Microsoft Office automatically checks for, downloads, and installs updates. Enabling automatic updates helps maintain security, stability, and compliance by ensuring all devices receive the latest patches and protections without relying on user action.
Learn More
PSM Security Setting - Updates Options Policy
Description: This policy setting allows you to hide the user interface (UI) options to enable or disable Office automatic updates from users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer. If you enable this policy setting, the Enable Update and Disable Updates options in the UI are hidden from users. If you disable or do not configure this policy setting, the Enable Update and Disable Updates options are visible, and users can enable or disable Office automatic updates from the UI.
Why It's Important: This policy hides the user interface option to enable or disable Office updates, ensuring users cannot interfere with automatic update settings. It enforces centralized control over patch management, maintaining consistent update behavior across all managed systems.
Learn More