This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi
Is it possible to configure (domain added, GPO controlled) Windows 10 20H2 to check ordinary updates (feature, office related, security etc.) against internal WSUS and driver updates against Microsoft Update?
Currently our PC's are configured to check updates against WSUS, but since Windows disabled direct driver update check from device manager, we have to use "Check online updates from Microsoft Update" - but this arises problem. It also checks security and feature updates against Microsoft Update and downloads and starts installing those. We don't want this.
We just need to update some drivers from time to time and thats it.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Why do you want to update only specific updates?
When device is not update, it is at risk of security issues and updates contains several fixes which are essential for operation of your system.
To update all blindly that MS offers is risky. We deploy MS updates in stages.
But sometimes we need to test different drivers and their behaviour (like wifi or video).
You could manage update deployment or delay them using WSUS and also delay them while performing internal tests.
Take a look at:
https://learn.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wsus
Then you may manually download drivers and deploy them using application deployment methods
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 23%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
If you like to update drivers only then it will wiser to get them from the hardware manufacturers support sites. More stable, more reliable.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 43%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERW%3C/text%3E%3C/svg%3E)
If we are to believe this site then a wuauclt.exe /SelfUpdateUnmanaged /UpdateNow should run an update against Microsoft Update, BUT it will run all updates published whether approved by WSUS or not. I have put this at the end of my WDS Install\$OEM$\$$\Setup\Scripts\SetupComplete.cmd batch file so new machines imaged should then have the latest published drivers. I then allow the manual checking of Microsoft updates against Microsoft Update (or more accurately I don't block it), so in the future I can run this again by scheduled task if necessary.