Security Compliance

Configure Windows Update local policy for machines that are not managed with GPO

This article describes how to configure the Windows Update local policy on a system that is not managed by a Group Policy.

First published date

10/26/2018 8:38 PM

Last published date

11/23/2022 4:49 PM

Overview

This article describes how to configure the Windows Update local policy on systems to access the WSUS server and download updates.

This procedure applies to systems that are not managed by a Group Policy. 

Product section

Patch Manager

Resolution

  1. Log in to Patch Manager as an administrator.
  2. In the navigation pane, locate and select a system that needs access to the WSUS server and third party updates. 
  3. Click Windows Update Local Policy Management in the Actions pane. 
  4. Enable the following settings in the Windows Update Local Policy Settings window:
    • Specify intranet Microsoft update service location (to know where WSUS should report to)
    • (Optional) Configure Automatic updates (to have the system update automatically by policy)
    • Allow signed content from intranet Microsoft update service location (to be enabled for third-party updates)
  5. Click Save to save the template.
  6. Click OK.
  7. Schedule the task or run it now.