Can we allow some Configuration Manager clients to also access Windows Update?

Question

We would like to allow a handful of configuration manager Windows 10/11 clients to get Software Updates from Configuration Manager, and also allow them to get updates from Windows Update through Windows Settings. The reason for this is that we'd like to validate our deployment process each month and make sure we haven't overlooked deployment of any important updates through the Software Update deployment process. It would be nice if this could include Office CDN updates as well, but Microsoft Windows, Edge, etc. are the primary concern.

Answer 1

Hi, @NotSoMagic Mike

Thank you for posting in Microsoft Q&A forum.

You may deploy a group policy to these computers to enable dual scan.

Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update. Set "Do not allow update deferral policies to cause scans against Windows Update" to "Disabled".

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".