In Windows Updates, why does the activity monitor show that all updates are coming from Microsoft when the device is set to use WSUS?

Question

I've confirmed that my policies are being applied via gpresult and checked the registry as well. I have the policy enabled to block fetching updates from the internet and yet when I check the Activity Monitor it shows that all updates are coming from Microsoft. Should I ignore the Activity Monitor or is something else going on here?

Answer 1

Hello,

The Activity Monitor in Windows Updates may not accurately reflect the source of updates when a device is set to use WSUS. This is because the Activity Monitor only shows the source of the update package, not the source of the metadata used to determine which updates are needed.

When a device is set to use WSUS, it will still contact Microsoft's servers to download the metadata that is used to determine which updates are needed. However, the actual update packages will be downloaded from the WSUS server.

Therefore, you can ignore the Activity Monitor in this case and confirm that the updates are indeed being downloaded from the WSUS server by checking the WSUS console.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.