This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 40%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWF%3C/text%3E%3C/svg%3E)
Hi,
Wondering a way to update a Windows 10 PC when it is not connected to the domain. It should auto update when it is not connected with the domain. The WSUS is not being used to push windows updates for domain joined computers too. If there is a way through WSUS, can consider this.
Is there any policy that can be pushed through Group policies ?
If you are having issues with getting updates outside of domain (intranet) and/or connected to the internet via a home WiFi - The Group Policy change information is found "CLICK HERE".
If you have further questions today (11/2/2021) I am actively monitoring this thread and happy to direct your learning journey.
Trav...
Hi Trav,
Thank you for your reply. Mostly we depend on PDQ to deploy updates rather WSUS. We do have some WSUS servers installed but not much relying on those. So I've just wonder If I use group policies, computer policies (Allow Automatic Updates immediate installation), will it install updates automatically when the the user is not connected to the domain (Ex: With Home Wifi) ?
Therefore all I have to do is set up a group policy to allow automatic updates and Allow non-administrators to receive update notifications and apply to specific computers rather users ?
Once the user has signed in (non admin users) then it will update the GPO and once they login with specified account at home, then it should update as I think.
Is this correct.
Thanks
When you join device to a Domain all control of the device is given to and provided by the Group Policies. The device is treated as a separate entity apart from the user. To implement full control of the device is executed through the Group Policy.
Yes you would make the change you are referring too. I assume sine you marked this as an answer, it is assumed you tried it, and it worked as expected.
You are correct as well regarding the user log and the update of the Group Policy. Assuming the user is logging into the domain, either via a direct connection to the corporate network. Or through a VPN connection to the corporate network. The Group Policy will update and any change in the Group Policy is immediately implemented.
Best of the Day to you!
Hi Travelor,
Actually I tried this last week and failed to check the updates either.
I used my mobile hot spot to test it and also enabled metered connections to download.
Updates starts to download as it connects to the domain back . There is a policy for WSUS too I just wonder whether it is overriding the policy that I have made. All these policies are attached to OUs. I also thought of using "enforce" for that policy.
What do you think.
Good Morning @Warnakulasuriya Fernando
When it comes to computers that are joined to and controlled by a domain. Most of the control of the domain connected computer is implemented through the domain level group policy editor. I have included in this response ,below, some links to training information and step by step exercises to help you in your search for answers.
WSUS services are available on any network connected device with an Windows 10 client token. Settings>Updates & Security>Delivery Optimization. Microsoft built the Update Client into Windows 10 and is by default configured to first seek a local network source for Windows Updates.
I have provided just a brief list of information links that will help you Deploy WSUS in a domain connected and administrated environment.
If I have helped you or anyone reading this response. Please feel free to expand this conversations
Thank you for taking the time to read. Please if you have further question, do not hesitate. I am actively monitoring this thread and will do my best to respond in a timely manor if you have immediate need.
Trav..
Hi Trav,
Thank you for your reply. Mostly we depend on PDQ to deploy updates rather WSUS. We do have some WSUS servers installed but not much relying on those. So I've just wonder If I use group policies, computer policies (Allow Automatic Updates immediate installation), will it install updates automatically when the the user is not connected to the domain (Ex: With Home Wifi) ?
Therefore all I have to do is set up a group policy to allow automatic updates and Allow non-administrators to receive update notifications and apply to specific computers rather users ?
Once the user has signed in (non admin users) then it will update the GPO and once they login with specified account at home, then it should update as I think.
Is this correct.
Thanks
