SOLVED SCCM and Windows Updates

[Nav4339]

Hi all,

I have a question regarding SCCM and deploying Windows updates to clients. My current environment is setup and updates are deployed via SCCM with no issues. However I have a query regarding something I picked up now. Users also have an option to go directly to Windows Update online and download updates themselves as well. Is this normal behavior with SCCM that does allow that, or should it be blocked completely?

 

[AhmedLS]

Hi all,

I have a question regarding SCCM and deploying Windows updates to clients. My current environment is setup and updates are deployed via SCCM with no issues. However I have a query regarding something I picked up now. Users also have an option to go directly to Windows Update online and download updates themselves as well. Is this normal behavior with SCCM that does allow that, or should it be blocked completely?

we have that enabled and never had a problem with that. my users are not IT gurus so it is actually rarely one of them do that. the most they get if they run directly from microsoft is the new drivers.

 

[Youssef Saad]

Hello @Nav4339,
You can configure Windows Update agent to not use any such Internet locations with the following GPO:

 

[Garth]

Yes this is normal but as @Youssef Saad said, you can stop this with a GPO.

 

[Nav4339]

Thank you everyone for the replies and clarification.

 

[Youssef Saad]

Thank you everyone for the replies and clarification.

You're welcome.
Don't forget to mark the useful answer as a solution to help other users to locate the reply which answered your request.