WSUS controls the approval, the download comes from Microsoft.
2 things: GPO for the location URLs of WSUS must have "Set the alternate download server:" to blank (or they can't download from Microsoft), and the WSUS server must continue to be accessible by the clients - meaning VPN or some other way.
WSUS option:- Do not store update files locally; computers install from Microsoft Update

Thumati, Venkata Ramanachari
26
Reputation points
Hi,
I am using WSUS Windows server 2012, In recent days all my users are working from home, so the WSUS settings can be changed to "Do not store update files locally; computers install from Microsoft Update", the users can download the updates from Microsoft Server ? and the updates which I approved in the WSUS server only?
please provide more information and behavior for the setting?
Thanks
T V Ramanachari
Accepted answer
-
Adam J. Marshall 5,916 Reputation points MVP
2021-06-22T09:51:40.643+00:00 1 additional answer
Sort by: Most helpful
-
IT Trev 11 Reputation points
2022-08-12T20:24:19.04+00:00 Adam - I changed my 'alternate download server' for ... other reasons ... and had no idea why my updates stopped working. Your post was SUPER helpful. Thank you so much!
-