Workstations not updating from WSUS

Question

Hello, good morning.

In the company we have a WSUS server and workstations configured with GPO to update only from WSUS.

In the navigation logs we find PCs that try to connect to the internet instead of WSUS.
How can we avoid it?

The connections we find are the following:

http://officecdn.microsoft.com.edgesuite.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/16.0.13801.20266/stream.x64.x-none.dat - HIER_DIRECT/96.17.164.19 application/octet-stream

They are many of the same domain.

Thanks a lot.

Answer 1

Hello JOEL RICCA ALVAREZ,

Thanks for your posting on this forum.

Perhaps we could apply the below policy on the clients to prevent getting updates from the Internet.
Do not allow update deferral policies to cause scans against Windows Update

Reference picture:

Hope the above will be helpful.

Regards,
Rita

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

the connection/URL you mentioned, has nothing to do with Windows/WSUS, that is an MS Office (2019 or 365) click-to-run content URI.
Check your Office update configuration.
Office click-to-run cannot be serviced from WSUS.

Answer 3

You've got dual scan going on. Remove those WUfB policies (set to not configured)
https://www.ajtek.ca/wsus/dual-scan-making-sense-of-why-so-many-admins-have-issues/
And setup your Alternative download server
https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/