I have client-side targeting setup to handle some remote workstations on our network. They VPN in from time to time -- so they can hit the internal WSUS server when they are connected.

I essentially want to set their Windows Update configuration via GPO to use internal WSUS, but to download the updates from the internet (Microsoft). I'm assuming this is a very standard configuration, but my clients are still trying to download from the WSUS server. Can I control this?

1 Answer 1

  1. Open WSUS Administration
  2. Click Options
  3. Click Update Files
  4. Select Do not store updates locally; computers install updates from Microsoft Update


  • Thanks, I found the Microsoft page with the answer to the OP's request and updated my answer. Jul 1, 2016 at 0:26
  • 1
    Wow, that was an edit worth a +1. :)
    – jscott
    Jul 1, 2016 at 0:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .