PENDING SCCM updates issue - group policy settings were overwritten by a higher authority

[sidpan]

Hi, we already have been using a WSUS server 1 to patch all our servers. We are moving toward SCCM to manage the endpoint protection. We had planned to use SCCM to push defender definition updates every 6 hours, and we also have a GPO which points all the server to the WSUS server 1. We dont have internet connectivity on the servers and we dont intend to use SCCM for software updates, just the defender definition patches.

Now I am getting an error that since the GPO is enforced to WSUS server 1, "group policy settings were overwritten by a higher authority (Domain Controller)" and the updates is stuck. The servers have not been getting the defender definition update since the last patch cycle where it got the updates from WSUS server 1. What are my options here, any help will be highly appreciated.

 

[Prajwal Desai]

Any reason why you are not using ConfigMgr to manage and deploy the updates ?.