Do Client PC can still look for updates through Internet even if the update source was pointing to a server?

Question

Do Client PC can still look for updates through Internet even if the update source was pointing to a server?

Ernani Ancheta 35

Hi Good day!

I would like to confirm if the update source was pointing to WSUS or SCCM/MECM Server, will the client pc still can search/look for updates through Microsoft/Internet?

If yes, can you point me to the GPO where we can disable this?

Thank you very much.

1 answer

Your answer

Answer 1

CherryZhang-MSFT 6,496

Hi @Ernani Ancheta,

Yes, even though we have specified the update source, the client can still search/look for updates through Microsoft/Internet. We can stop it by deploying the GPO Do not connect to any Windows Update Internet locations.

The link for your reference:

Do not connect to any Windows Update Internet locations (thewindowsclub.com)

Note: Microsoft provides third-party contact information to help you understand the problem. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Looking forward to your feedback.

Best regards

Cherry

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

CherryZhang-MSFT 6,496 Reputation points

2023-01-30T08:12:34.6166667+00:00

Hi,

I'm writing to see if this information has solved your issue. If there's anything else we can help please feel free to let us know, we will do our best to help you.

Thanks for your time.

Best regards,
Cherry
Ernani Ancheta 35 Reputation points

2023-02-01T07:33:15.85+00:00

Hi Cherry, Thank you so much for your inputs.

One follow-up question though.

In the WindowsUpdateLogs.logs we noticed this message "Do not connect to Windows Update Internet locations: No" means that the policy was left unconfigured. But there was an existing GPO policy for "Windows Update AutoUpdate" and configured to "Denied" My question is do the machine will still look for updates through the internet since "Do not connect to Windows Update Internet locations" was left unconfigured even there was an existing policy for "Windows Update AutoUpdate"?

Thank you in advance.
CherryZhang-MSFT 6,496 Reputation points

2023-02-02T08:26:26.64+00:00

Hi @Ernani Ancheta,

Please help check if you have configured any policies in Windows Update for Business? Besides, if your client is managed by SCCM, the policy Do not allow update deferral policies to cause scans against Windows Update will be enabled by default. It will prevent our client scan updates from Windows Update again. Please help confirm that if it was enabled?

The screenshot for your reference:

Thanks for your time!

Best regards,
Cherry

Share via

Do Client PC can still look for updates through Internet even if the update source was pointing to a server?

1 answer

Your answer