GPO's DualScan & SetPolicyDrivenUpdateSourceFor<Update Type>

Copper Contributor

If we leverage the new GPO's SetPolicyDrivenUpdateSourceFor<Update Type>, what should the DualScan GPO "Do not allow update deferral policies to cause scans against Windows Update" be set to?

-Reference: https://docs.microsoft.com/en-us/windows/deployment/update/wufb-wsus#configure-the-scan-sources

1 Reply
Hi! Great question. :)

We recommend that you leverage the SetPolicyDriverUpdateSourceFor <UpdateTypes> and unconfigure / not set the "Do not allow update deferral policies to cause scans against Windows Update".

Note, "Do not allow update deferral policies --- " is not supported on Windows 11 and on Windows 10 you don't need it once you set PolicyDrivenUpdate source so you can just disable it or not configure it :)