This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Computers do not use WSUS

Question
0

Sign in to vote

I have WSUS on the network running on Windows Server 2016.
All computers in the domain receive the GPO that sets the WSUS path, but
many insist on getting updates on Windows Update, as are many computers,
sometimes the internet link is overloaded.
Why do not these computers use WSUS? What can I be checking to fix this?

Thank you !

Ivanildo Teixeira Galvão

Monday, July 23, 2018 12:11 AM

All replies

0

Sign in to vote

Hello Ivanildo Galvao,



Glad to help.

This issue is caused by "duel scan" which debuted in 1607. It means, the client automatically scans against both WSUS and WU (internet).

To disable duel scan, you need enable the group policy System/Internet Communication Management/Internet Communication settings/Turn off access to all Windows Update features.



You could get more information from following link:



Demystifying “Dual Scan”

https://blogs.technet.microsoft.com/wsus/2017/05/05/demystifying-dual-scan/

Improving Dual Scan on 1607

https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/

Windows 10 Updates and Store GPO behavior with DualScan disabled and SCCM SUP/WSUS managed

https://blogs.technet.microsoft.com/swisspfe/2018/04/13/win10-updates-store-gpos-dualscandisabled-sup-wsus/



Hope above answer could help you and look forward to your feedback.



Best Regards,

Ray Jia
Please remember to mark the replies as answers if they help.

If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Monday, July 23, 2018 1:17 AM
0

Sign in to vote

Run through my guide and it will get you started on figuring out why your systems are not populating and using WSUS. It may be a dual scan issue like Ray mentions above, but it could be a miss configuration of your GPOs.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-1-choosing-your-server-os/

Specifically to do with GPOs:

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/
Adam Marshall, MCSE: Security
https://www.ajtek.ca
Microsoft MVP - Windows and Devices for IT

Monday, July 23, 2018 1:46 AM
0

Sign in to vote

Hi guys,

I'm used tutorial https://miketerrill.net/2016/10/11/disable-check-online-for-updates-from-microsoft-update-in-windows-10/

Thanks for you responses.
Ivanildo Teixeira Galvão

Monday, July 23, 2018 4:10 PM
0

Sign in to vote

Hello

Well, with Do not connect to any Windows Update Internet locations enabled, you will also disable the ability to install software from the Windows Store and make sure that what you want.

Or you could enable System/Internet Communication Management/Internet Communication settings/Turn off access to all Windows Update features which does not affect Windows Store.

Best Regards,

Ray Jia
Please remember to mark the replies as answers if they help.

If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

Tuesday, July 24, 2018 1:58 AM