Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query
According to this article
all you need to do is to right click the GPO policy and select Edit. Navigate to Computer configuration > Policies > Administrative Templates > Windows Components > Windows Update. Select "Allow signed content from intranet Microsoft update service location" and click Edit policy settings. Select Enabled and click OK.
If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.