Update Edge Chromium exclusively through WSUS

Question

Is there a way to update Edge Chromium exclusively through WSUS? Currently we have not released certain updates in WSUS (because they cause errors). However, the clients still download them online directly from Microsoft.

For the "normal" Windows updates there is a GPO setting to prevent this. Windows updates currently only load from WSUS - but Edge Chromium ignores this setting.
With the new policy definitions there are GPO settings "Microsoft Edge-Update..." but here I only find settings to prevent updates completely. (Or only manually, or only automatically) But according to the policy description this does not solve my problem.

Does anybody have a hint?

Best regards!
Mathias

Answer 1

Hi Mathias,

Thanks for your posting on Q&A.

I want to confirm whether you want to deploy the Microsoft Edge or update the Microsoft Edge.

In my opinion, we could not deploy the Microsoft Edge by WSUS but we could deploy and update the Microsoft Edge by Configuration Manager. Here is a related picture for your reference:

In addition, we could refer to this link to deploy and update the Microsoft Edge by Configuration Manager.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello, Rita,
Thanks for your message!

No, it is actually only about the current updates. I have already rolled out the new browser in the company.

Windows updates work perfectly with WSUS and via GPO I also specify that they are only loaded by WSUS. (By the way, this GPO setting is also very well hidden)

Now I want to prevent Edge from loading updates itself from the internet, like the Windows Updates, without bypassing WSUS. At the moment that's what's causing us a lot of problems - especially the IE mode seems to cause problems with every second update.

BR,
Mathias

Answer 3

Hi Mathias,

Thanks for your confirmation.

Perhaps we could apply the below policy on the client to prevent the clients from the Internet:
Policy: Do not allow update deferral policies to cause scans against Windows Update

If there are any updates about this issue, please let me know.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

This is the setting we have already set for Windows Updates. It works with Windows updates but Edge Chromium seems to ignore this GPO...

Answer 5

Another idea - is there a specific update URL for Edge that I could block? The only other alternative I found is to completely disable updates via Edge GPO. I'm just not sure if Edge then will get the updates from WSUS via Windows Updates...