locked
Windows 10 version 1607 Windows Update is installing unapproved WSUS updates RRS feed

  • General discussion

  • Our clients are managed by WSUS for updates, and we have a few 1607 (Anniversary) builds. All our 1607 builds are installing updates that have not been approved on our WSUS server. I'm not sure if they are bypassing WSUS and downloading directly from Microsoft, or if it is bypassing WSUS and getting them from Delivery Optimization. Either way they should not be installing updates I haven't approved. Our 1511 builds still seem to be obeying WSUS and not installing unapproved updates. The only Delivery Optimization setting I have set is to use the "group" option for downloads. Anyone else experiencing this?
    • Edited by Aaron.H Wednesday, September 14, 2016 9:57 PM
    Monday, September 12, 2016 3:36 PM

All replies

  • After some further testing, I think I have narrowed down this problem to the "Defer Feature Updates" setting. If I enable the Defer, either through GPO or locally, build 1607 ignores WSUS and gets all updates from Microsoft. Even ones I have not approved in WSUS. As long as I don't have the Defer Feature Updates enabled, it respects WSUS settings.
    Wednesday, October 19, 2016 7:12 PM