SCCM Clients automatically connect to Microsoft online for updates

[Gau]

I have tried searching but this topic is not clearly defined. So basically - we want the SCCM Clients to stop connecting to Microsoft Online directly and instead, wait for the updates to be pushed from SCCM via Deployment Packages.

 

Setup:

SCCM 2012 SP1

SUP configured

WSUS (installed but not configured)

Windows XP and Windows 7 clients

 

Issue:

The SCCM clients (XP and 7) automatically download and install Software Updates from Microsoft online.

These client machines do not have GPO (still on pilot and we're still testing) and they correctly display that the WSUS is the SCCM server. The users can also change the Update Settings on the clients.

 

Is this an expected behavior and do we need to configure GPO to change the Automatic Update settings? If yes, then what are the recommended GPO settings that we need to configure?

Should we set the GPO setting "Configure Automatic Updates" to Disable or will that cause problems?

 

 

 

Thank You :-)

 

 

 

[kvineets]

1. SCCM clients do not connect to Microsoft for updates.

2. Configure the client agent settings for scanning for updates if WSUS infra in place.

3. Create a GPO for system to disable to auto connect to Microsoft for updates,