Enforcement of updates for devices unassociated with a directory service

A system, comprising:

• a client device that comprises a processor and a memory;
• and
• an application comprising machine-readable instructions stored in the memory that, when executed by the processor, cause the client device to at least:
• receive a policy specifying a locator of an update service for the client device to enforce based at least in part on an enrollment status of the client device with respect to a management service;
• configure the client device to replace a default update service with the locator of the update service based at least in part on modifying a value of at least one of a plurality of registry keys stored on the client device in an instance in which it is determined that the client device is to use the locator;
• determine that a current state of the client device is not compliant with the policy based at least in part on the client device being connected to an unauthorized network;
• and
• in response to determining that the current state of the client device is not compliant with the policy, instruct a management agent executed on the client device to modify the at least one of the plurality of registry keys stored on the client device in order to disable use of the update service, the policy specifying that the client device is prohibited from connecting to or using the update service, wherein the management agent is instructed to modify the at least one of the plurality of registry keys for disabling the use of the update service until the management agent detects that the current state of the client device is compliant with the policy.

A non-transitory computer readable medium comprising machine-readable instructions that, when executed by a processor of a client device, cause the client device to at least:

• receive a policy specifying a locator of an update service for the client device to enforce based at least in part on an enrollment status of the client device with respect to a management service;
• configure the client device to use the locator of the update service instead of a default update service associated with an operating system of the client device based at least in part on modifying a value of at least one of a plurality of registry keys stored on the client device in an instance in which it is determined that the client device is to use the locator;
• determine that a current state of the client device is not compliant with the policy based at least in part on the client device being connected to an unauthorized network;
• and
• in response to determining that the current state of client device is not compliant with the policy, instruct a management agent executed on the client device to modify the at least one of the plurality of registry keys stored on the client device in order to disable use of the update service, the policy specifying that the client device is prohibited from connecting to or using the update service while the client device is connected to the unauthorized network, wherein the management agent is instructed to modify the at least one of the plurality of registry keys for disabling the use of the update service until the management agent detects that the current state of the client device is compliant with the policy.