Workstations not updating from WSUS

JOEL RICCA ALVAREZ 21 Reputation points

Hello, good morning.

In the company we have a WSUS server and workstations configured with GPO to update only from WSUS.

In the navigation logs we find PCs that try to connect to the internet instead of WSUS.
How can we avoid it?

The connections we find are the following: - HIER_DIRECT/ application/octet-stream

They are many of the same domain.

Thanks a lot.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
9,511 questions
0 comments No comments
{count} votes

Accepted answer
  1. Rita Hu -MSFT 9,441 Reputation points


    Thanks for your posting on this forum.

    Perhaps we could apply the below policy on the clients to prevent getting updates from the Internet.
    Do not allow update deferral policies to cause scans against Windows Update

    Reference picture:

    Hope the above will be helpful.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

2 additional answers

Sort by: Most helpful
  1. DonPick 1,256 Reputation points

    the connection/URL you mentioned, has nothing to do with Windows/WSUS, that is an MS Office (2019 or 365) click-to-run content URI.
    Check your Office update configuration.
    Office click-to-run cannot be serviced from WSUS.

    1 person found this answer helpful.

  2. Adam J. Marshall 6,181 Reputation points MVP