Security Compliance

Unable to change GPO group membership in Patch Manager

This article addresses an issue that prevents you from changing group membership due to Client-Side Targeting in the GPO.

First published date

10/22/2018 9:07 PM

Last published date

2/25/2025 7:48 PM

Overview

Due to Client Side Targeting in the GPO, you cannot move any computers. To change group membership using Patch Manager, you must disable Client Side Targeting or create a new GPO for the new group.

The following example displays a workstation membership group change failure with Client Side Targeting enabled.


The following example shows a successful workstation membership change with Client Side Targeting disabled. 

Product section

Patch Manager

Resolution

  1. In the Group Policy Editor, select the WSUS policies you are using, and click Edit.
  2. Under Computer Configuration, expand Administrative Templates > Windows Components > Windows Update.
  3. Double-click Client Side Targeting and select Not Configured or Disabled.
  4. Update the Group Policy for the workstation.
You should now be able to change groups for the workstation.