Combining this article
https://learn.microsoft.com/en-us/windows/deployment/update/fod-and-lang-packs
with this one
https://learn.microsoft.com/en-us/windows/deployment/update/wufb-wsus
What I am reading is:
- If your clients are running Windows 11 22H2 and above, you can disable 'Specify settings for optional component installation and component repair' provided your WSUS is set up for UUP
- If your clients are running Windows 11 21H2 / Windows 10 (what about Windows Server?) you can leave 'Specify settings for optional component installation and component repair' set to download FoD from WSUS - but also either:
- Configure 'Specify source service for specific classes of Windows Updates' to get feature and quality updates from Windows Update (hence bypassing WSUS) or
- Do not configure 'Specify source service for specific classes of Windows Update' at all
- If you do not configure this policy, all your updates should come from WSUS - unless you have 'deferral policies' set
- What policies are 'deferral policies' is not defined, but it's safe to assume it includes the following - so if you want WSUS to work with FoD on Windows 11 21H2 or Windows 10, I think you must not also enable these.
- Select when Preview Builds and Feature Updates are received (DeferFeatureUpdates, DeferFeatureUpdatesPeriodInDays, BranchReadinessLevel, PauseFeatureUpdatesStartTime)
- Select when Quality Updates are received (DeferQualityUpdates, DeferQualityUpdatesPeriodInDays, PauseQualityUpdatesStartTime)