Win 10 duo scan

Cause
=====
Windows 10 的Duo Scan功能讓使用該作業系統會向WSUS和網際網路取的更新。

 Action Plan

==============

-請在Windows 10的電腦上打開edit group policy，將以下兩個GPO給開啟

-在命令提示字元套用在電腦上執行gpupdate /force直接套用GPO

-打開regedit，檢查HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate下是否有以下兩個key值

-測試windows update是否運作正常  

必須開啟的GPO

1. Do not connect to any Windows Update Internet locations

Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store.

Use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not connect to any Windows Update Internet locations to enable this policy. When enabled, this policy will disable the functionality described above, and may cause connection to public services such as the Microsoft Store, Windows Update for Business and Delivery Optimization to stop working.

2. Do not allow update deferral policies to cause scans against Windows Update

The new policy, “Do not allow update deferral policies to cause scans against Windows Update”, when enabled, will disable Dual Scan. This allows enterprises that wish to configure deferral policies, the ability to do so without being concerned that Dual Scan will override administrator intent.

Use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not allow update deferral policies to cause scans against Windows Update to enable this policy. When enabled, this policy will disable the functionality described above, and may cause connection to public services such as the Microsoft Store, Windows Update for Business and Delivery Optimization to stop working.

若要使用Do not allow update deferral policies to cause scans against Windows Update的GPO，Windows 10版本須在1607build1593之上，請參考以下連結
https://support.microsoft.com/en-us/help/4034658/windows-10-update-kb4034658

 

More Information
==============

https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/

 

https://blogs.technet.microsoft.com/configurationmgr/2017/10/10/using-configmgr-with-windows-10-wufb-deferral-policies/