Monday, November 25, 2019

Disabling WSUS in SBS2011 etc

To allow a client machine to get updates directly from Microsoft.

Just the basics...

In Group Policy Management
Under a GPO for Updates...Common
  = Update Services Common Setting Policy
  Right Click and select Edit
  Go to Computer Config
       Administrative Templates
           Windows Components
                Windows Update
Find entry for Specify Intranet...
   And edit it to Not Configured


Is a good idea to disable the WSUS service (optionally in IIS also).  but it is not recommended to remove WSUS as the SBS console breaks.

In services.msc, find Update Service, and set to Manual


..
Note on a workstation, say a laptop that doesn't get tot he office much, can delete a registry entry on the laptop.  Note, if the unit comes back to the office, a Group Policy will be reapplied and you would need to re-delete the key

HKLM\Software\Policies\Microsoft\Windows\

  Windows Update

- - - - - - - - - - - - - - 
Relevant Articles:

https://community.spiceworks.com/topic/2086575-stop-using-wsus-for-workstations-on-sbs-2011
also
https://social.technet.microsoft.com/Forums/en-US/407a0a61-bd04-4f2d-9a41-51d33ac063c3/procedure-for-disabling-wsus-3x-and-enabling-microsoft-update-for-sbs2011-server-and-its-clients?forum=smallbusinessserver

https://www.thirdtier.net/introducing-windows-10-into-your-sbs-2011-standard-network/