Windows Update Management via Intune & WSUS

Chanuka Francis 346 Reputation points

Hello Experts,

I have a question. Let's say I have a WSUS in my office where all the windows endpoints get updates. Plus we have Intune tenant in our Org and most of the PCs are enrolled. Since most of the users WFH these days their PCs not getting updates as they don't have connectivity to WSUS. Is it possible that we can also deploy Windows Updates from Intune utilizing Windows Update for business for these devices that already pointed to WSUS? Would it work?

Please advice.

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
2,757 questions
0 comments No comments
{count} votes

Accepted answer
  1. Eswar Koneti 2,101 Reputation points

    Here is the catch: if you have not explicitly disabled dual-scan, you are good to use intune to patch your windows devices.
    Some information about the dual scan

    additional information incase you would like to remove the registry keys incase you have dual scan disabled.

    powershell script to clear the reg keys:

    $ErrorActionPreference = 'SilentlyContinue'
    Remove-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate' -Force -Name WUServer
    Remove-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate' -Force -Name TargetGroup
    Remove-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate' -Force -Name WUStatusServer
    Remove-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate' -Force -Name TargetGroupEnable
    Set-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Value 0 -Force -Name UseWUServer
    Set-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\AU' -Value 0 -Force -Name NoAutoUpdate
    Set-ItemProperty 'HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate'    -Value 0 -force -Name DisableWindowsUpdateAccess
    Restart-Service -Name wuauserv


0 additional answers

Sort by: Most helpful